mojaloop/event-sidecar:v11.0.1 container image
Docker HubScanned 14 Sept 2026
Deployed by 5 of 17,781 indexed charts (latest versions) at this tag.Docker Hub all tags of mojaloop/event-sidecar
mojaloop/event-sidecar:v11.0.1 resolved to 89b8ab71b74b, scanned 14 Sept 2026: 147 findings, 1 critical; deployed by 5 charts, among them account-lookup-service, account-lookup-service-admin and admin-api-svc.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Medium findings
Medium: findings whose contribution to the Radar Score is 15–39. Show every band
Findings for digest 89b8ab71b74b as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Medium | GHSA-hrpp-h998-j3pp | qs | 6.5.3 |
| Medium | GHSA-2p57-rm9w-gvfp | ip | no fix listed |
| Medium | GHSA-xvch-5gv4-984h | minimist | 1.2.6 |
| Medium | GHSA-r628-mhmh-qjhw | tar | 6.1.2 |
| Medium | GHSA-896r-f27r-55mw | json-schema | 0.4.0 |
| Medium | GHSA-8hfj-j24r-96c4 | moment | 2.29.2 |
| Medium | GHSA-wc69-rhjr-hc9g | moment | 2.29.4 |
| Medium | GHSA-vx3p-948g-6vhq | ssri | 6.0.2 |
| Medium | ALPINE-CVE-2021-36159 | apk-tools | 2.10.7-r0 |
| Medium | GHSA-9r2w-394v-53qc | tar | 6.1.7 |
| Medium | GHSA-2w6w-674q-4c4q | handlebars | 4.7.9 |
| Medium | GHSA-fwr7-v2mv-hh25 | async | 3.2.2 |
| Medium | GHSA-h755-8qp9-cq85 | protobufjs | 6.11.4 |
| Medium | ALPINE-CVE-2021-23841 | openssl | 1.1.1j-r0 |
| Medium | GHSA-93q8-gq69-wqmw | ansi-regex | 3.0.1 |
| Medium | GHSA-fjxv-7rqg-78g4 | form-data | 2.5.4 |
| Medium | GHSA-pw54-mh39-w3hc | npm-user-validate | 1.0.1 |
| Medium | ALPINE-CVE-2020-1971 | openssl | 1.1.1i-r0 |
| Medium | GHSA-qqgx-2p2h-9c37 | ini | 1.3.6 |
| Medium | ALPINE-CVE-2019-15847 | gcc | 9.3.0-r0 |
| Medium | GHSA-ff7x-qrg7-qggm | dot-prop | 4.2.1 |
| Medium | GHSA-c2qf-rxjj-qqgw | semver | 5.7.2 |
| Medium | ALPINE-CVE-2021-42380 | busybox | 1.31.1-r11 |
| Medium | GHSA-r683-j2x4-v87g | node-fetch | 2.6.7 |
| Medium | ALPINE-CVE-2021-42379 | busybox | 1.31.1-r11 |
| Medium | ALPINE-CVE-2021-42381 | busybox | 1.31.1-r11 |
| Medium | ALPINE-CVE-2021-42385 | busybox | 1.31.1-r11 |
| Medium | ALPINE-CVE-2021-42378 | busybox | 1.31.1-r11 |
| Medium | ALPINE-CVE-2021-42382 | busybox | 1.31.1-r11 |
| Medium | ALPINE-CVE-2021-42384 | busybox | 1.31.1-r11 |
| Medium | ALPINE-CVE-2021-42386 | busybox | 1.31.1-r11 |
| Medium | GHSA-qq89-hq3f-393p | tar | 6.1.9 |
| Medium | GHSA-g954-5hwp-pp24 | protobufjs | 6.11.3 |
| Medium | ALPINE-CVE-2021-42383 | busybox | 1.31.1-r11 |
| Medium | GHSA-f8q6-p94x-37v3 | minimatch | 3.0.5 |
| Medium | GHSA-xq3m-2v4x-88gg | protobufjs | 7.5.5 |
| Medium | GHSA-72xf-g2v4-qvf3 | tough-cookie | 4.1.3 |
| Medium | GHSA-5955-9wpr-37jh | tar | 6.1.9 |
| Medium | GHSA-rc47-6667-2j5j | http-cache-semantics | 4.1.1 |
| Medium | GHSA-c429-5p7v-vgjp | hoek | no fix listed |
| Medium | GHSA-43f8-2h32-f4cj | hosted-git-info | 2.8.9 |
| Medium | GHSA-f23m-r3pf-42rh | lodash | 4.18.0 |
| Medium | GHSA-xxjr-mmjv-4gpg | lodash | 4.17.23 |
| Medium | GHSA-v88g-cgmw-v5xw | ajv | 6.12.3 |
| Medium | GHSA-9wv6-86v2-598j | path-to-regexp | 1.9.0 |
| Medium | GHSA-3mfm-83xf-c92r | handlebars | 4.7.9 |
| Medium | GHSA-xhpv-hc6g-r9c6 | handlebars | 4.7.9 |
| Medium | GHSA-3xgq-45jj-v275 | cross-spawn | 6.0.6 |
| Medium | GHSA-pfrx-2q88-qq97 | got | 11.8.5 |
| Medium | GHSA-3ppc-4f35-3m26 | minimatch | 3.1.3 |
Used by
| Chart | Version | Tag | Containers |
|---|---|---|---|
| account-lookup-servicemojaloop | 13.0.0 | v11.0.1 | 2 |
| account-lookup-service-adminmojaloop | 13.0.0 | v11.0.1 | 1 |
| admin-api-svcmojaloop | 12.0.0 | v11.0.1 | 1 |
| fspiop-transfer-api-svcmojaloop | 12.0.1 | v11.0.1 | 1 |
| mojaloopmojaloop | 14.0.0 | v11.0.1 | 4 |
Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.