mojaloop/event-sidecar:v11.0.1 container image
Docker HubScanned 14 Sept 2026
Deployed by 5 of 17,781 indexed charts (latest versions) at this tag.Docker Hub all tags of mojaloop/event-sidecar
mojaloop/event-sidecar:v11.0.1 resolved to 89b8ab71b74b, scanned 14 Sept 2026: 147 findings, 1 critical; deployed by 5 charts, among them account-lookup-service, account-lookup-service-admin and admin-api-svc.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Vulnerabilities
147 distinct on this digest
Findings for digest 89b8ab71b74b as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Medium | GHSA-43f8-2h32-f4cj | hosted-git-info | 2.8.9 |
| Medium | GHSA-f23m-r3pf-42rh | lodash | 4.18.0 |
| Medium | GHSA-xxjr-mmjv-4gpg | lodash | 4.17.23 |
| Medium | GHSA-v88g-cgmw-v5xw | ajv | 6.12.3 |
| Medium | GHSA-9wv6-86v2-598j | path-to-regexp | 1.9.0 |
| Medium | GHSA-3mfm-83xf-c92r | handlebars | 4.7.9 |
| Medium | GHSA-xhpv-hc6g-r9c6 | handlebars | 4.7.9 |
| Medium | GHSA-3xgq-45jj-v275 | cross-spawn | 6.0.6 |
| Medium | GHSA-pfrx-2q88-qq97 | got | 11.8.5 |
| Medium | GHSA-3ppc-4f35-3m26 | minimatch | 3.1.3 |
| Medium | GHSA-vh95-rmgr-6w4m | minimist | 1.2.3 |
| Medium | GHSA-6c9x-mj3g-h47x | swagger-ui-dist | 4.1.3 |
| Low | GHSA-vcc3-ghjq-m6fr | decode-uri-component | 0.5.0 |
| Low | GHSA-hj48-42vr-x3v9 | path-parse | 1.0.7 |
| Low | GHSA-34x7-hfp2-rc4v | tar | 7.5.7 |
| Low | GHSA-ph9p-34f9-6g65 | tmp | 0.2.6 |
| Low | GHSA-qgmg-gppg-76g5 | validator | 13.7.0 |
| Low | GHSA-685m-2w69-288q | protobufjs | 7.5.6 |
| Low | GHSA-75px-5xx7-5xc7 | protobufjs | 7.5.6 |
| Low | GHSA-rgw5-rvv9-x895 | brace-expansion | 1.1.18 |
| Low | GHSA-9cx6-37pm-9jff | handlebars | 4.7.9 |
| Low | GHSA-f5x3-32g6-xq36 | tar | 6.2.1 |
| Low | GHSA-8cf7-32gw-wr33 | jsonwebtoken | 9.0.0 |
| Low | GHSA-j8xg-fqg3-53r7 | word-wrap | 1.2.4 |
| Low | GHSA-qffp-2rhf-9h96 | tar | 7.5.10 |
| Low | GHSA-23hp-3jrh-7fpw | tar | 7.5.19 |
| Low | GHSA-52cp-r559-cp3m | js-yaml | 3.15.0 |
| Low | GHSA-hmw2-7cc7-3qxx | form-data | 2.5.6 |
| Low | GHSA-7r86-cg39-jmmj | minimatch | 3.1.3 |
| Low | GHSA-vghf-hv5q-vc2g | validator | 13.15.22 |
| Low | GHSA-36hh-x5p5-jgc8 | @hapi/ | 6.0.2 |
| Low | GHSA-8qq5-rm4j-mr97 | tar | 7.5.3 |
| Low | GHSA-23c5-xmqv-rm74 | minimatch | 3.1.4 |
| Low | GHSA-mh99-v99m-4gvg | brace-expansion | 1.1.17 |
| Low | GHSA-wcpc-wj8m-hjx6 | protobufjs | 7.6.1 |
| Low | GHSA-73rr-hh4g-fpgx | diff | 4.0.4 |
| Low | GHSA-66ff-xgx4-vchm | protobufjs | 7.5.6 |
| Low | GHSA-8x88-c5mf-7j5w | tar | 7.5.18 |
| Low | GHSA-jg4p-7fhp-p32p | @hapi/ | 6.0.1 |
| Low | GHSA-2g4f-4pwh-qvx6 | ajv | 6.14.0 |
| Low | GHSA-p8p7-x288-28g6 | request | no fix listed |
| Low | GHSA-r6q2-hw4h-h46w | tar | 7.5.4 |
| Low | GHSA-2883-xcg3-v3hh | js-yaml | 3.15.2 |
| Low | GHSA-xjpj-3mr7-gcpf | handlebars | 4.7.9 |
| Low | GHSA-r292-9mhp-454m | tar | 7.5.21 |
| Low | GHSA-jvwf-75h9-cwgg | protobufjs | 7.5.6 |
| Low | ALPINE-CVE-2021-23839 | openssl | 1.1.1j-r0 |
| Low | GHSA-w5hq-g745-h8pq | uuid | 11.1.1 |
| Low | GHSA-gxpj-cx7g-858c | debug | 3.2.7 |
| Low | GHSA-9ppj-qmqm-q256 | tar | 7.5.11 |
Used by
5 charts
| Chart | Version | Tag | Containers |
|---|---|---|---|
| account-lookup-servicemojaloop | 13.0.0 | v11.0.1 | 2 |
| account-lookup-service-adminmojaloop | 13.0.0 | v11.0.1 | 1 |
| admin-api-svcmojaloop | 12.0.0 | v11.0.1 | 1 |
| fspiop-transfer-api-svcmojaloop | 12.0.1 | v11.0.1 | 1 |
| mojaloopmojaloop | 14.0.0 | v11.0.1 | 4 |
Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.