StackRadar

mojaloop/ml-api-adapter:v11.1.6 container image

Docker Hub

Scanned 14 Sept 2026

Deployed by 2 of 17,781 indexed charts (latest versions) at this tag.Docker Hub all tags of mojaloop/ml-api-adapter

mojaloop/ml-api-adapter:v11.1.6 resolved to fb71d233c742, scanned 14 Sept 2026: 224 findings, 1 critical; deployed by 2 charts, among them fspiop-transfer-api-svc and mojaloop.

Radar Score

3,64411071142

224 findings on digest fb71d233c742 · scanned 14 Sept 2026

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest
TagDigestUsed byLast seenVulnerabilitiesRadar Score
v11.1.6resolves tofb71d233c7422 charts4 days ago110711423,644

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Medium findings

71 distinct on this digest

Medium: findings whose contribution to the Radar Score is 15–39. Show every band

Findings for digest fb71d233c742 as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.

SeverityAdvisoryPackageFixed in
MediumGHSA-hrpp-h998-j3ppqs@6.5.26.5.3
MediumGHSA-2p57-rm9w-gvfpip@1.1.5no fix listed
MediumGHSA-xvch-5gv4-984hminimist@1.2.01.2.6
MediumGHSA-r628-mhmh-qjhwtar@4.4.134.4.15
MediumGHSA-896r-f27r-55mwjson-schema@0.2.30.4.0
MediumGHSA-cph5-m8f7-6c5xaxios@0.21.10.21.2
MediumGHSA-8hfj-j24r-96c4moment@2.27.02.29.2
MediumGHSA-wc69-rhjr-hc9gmoment@2.27.02.29.4
MediumGHSA-vx3p-948g-6vhqssri@6.0.16.0.2
MediumALPINE-CVE-2021-36159apk-tools@2.10.4-r32.10.7-r0
MediumGHSA-9r2w-394v-53qctar@4.4.134.4.16
MediumGHSA-2w6w-674q-4c4qhandlebars@4.7.74.7.9
MediumGHSA-fwr7-v2mv-hh25async@2.6.32.6.4
MediumGHSA-h755-8qp9-cq85protobufjs@6.11.26.11.4
MediumALPINE-CVE-2021-23841openssl@1.1.1d-r31.1.1j-r0
MediumGHSA-93q8-gq69-wqmwansi-regex@5.0.05.0.1
MediumGHSA-fjxv-7rqg-78g4form-data@2.3.22.5.4
MediumGHSA-pw54-mh39-w3hcnpm-user-validate@1.0.01.0.1
MediumALPINE-CVE-2020-1971openssl@1.1.1d-r31.1.1i-r0
MediumGHSA-qqgx-2p2h-9c37ini@1.3.51.3.6
MediumALPINE-CVE-2019-15847gcc@9.2.0-r39.3.0-r0
MediumGHSA-74fj-2j2h-c42qfollow-redirects@1.13.11.14.7
MediumGHSA-ff7x-qrg7-qggmdot-prop@4.2.04.2.1
MediumGHSA-c2qf-rxjj-qqgwsemver@5.7.15.7.2
MediumGHSA-43fc-jf86-j433axios@0.21.10.30.3
MediumALPINE-CVE-2021-42380busybox@1.31.1-r91.31.1-r11
MediumGHSA-r683-j2x4-v87gnode-fetch@2.6.12.6.7
MediumALPINE-CVE-2021-42379busybox@1.31.1-r91.31.1-r11
MediumALPINE-CVE-2021-42381busybox@1.31.1-r91.31.1-r11
MediumALPINE-CVE-2021-42385busybox@1.31.1-r91.31.1-r11
MediumALPINE-CVE-2021-42378busybox@1.31.1-r91.31.1-r11
MediumALPINE-CVE-2021-42382busybox@1.31.1-r91.31.1-r11
MediumALPINE-CVE-2021-42384busybox@1.31.1-r91.31.1-r11
MediumALPINE-CVE-2021-42386busybox@1.31.1-r91.31.1-r11
MediumGHSA-qq89-hq3f-393ptar@4.4.134.4.18
MediumGHSA-g954-5hwp-pp24protobufjs@6.11.26.11.3
MediumGHSA-6xrf-q977-5vgcjson-pointer@0.6.10.6.2
MediumGHSA-wf6x-7x77-mvgwimmutable@3.8.23.8.3
MediumGHSA-rp65-9cf3-cjxrnth-check@2.0.02.0.1
MediumALPINE-CVE-2021-42383busybox@1.31.1-r91.31.1-r11
MediumGHSA-f8q6-p94x-37v3minimatch@3.0.43.0.5
MediumGHSA-xq3m-2v4x-88ggprotobufjs@6.11.27.5.5
MediumGHSA-72xf-g2v4-qvf3tough-cookie@2.4.34.1.3
MediumGHSA-5955-9wpr-37jhtar@4.4.134.4.18
MediumGHSA-rc47-6667-2j5jhttp-cache-semantics@3.8.14.1.1
MediumGHSA-grv7-fg5c-xmjgbraces@3.0.23.0.3
MediumGHSA-cgfm-xwp7-2cvrsanitize-html@1.27.52.7.1
MediumGHSA-pjwm-pj3p-43mvaxios@0.21.10.32.0
MediumGHSA-43f8-2h32-f4cjhosted-git-info@2.8.52.8.9
MediumGHSA-hwj9-h5mp-3pm3postcss@7.0.357.0.36

Used by

2 charts
ChartVersionTagContainers
fspiop-transfer-api-svcmojaloop12.0.1v11.1.61
mojaloopmojaloop14.0.0v11.1.61

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.

syft 1.42.1 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.