StackRadar

mojaloop/role-assignment-service:v2.1.0 container image

Docker Hub

Scanned 14 Sept 2026

Deployed by 2 of 17,781 indexed charts (latest versions) at this tag.Docker Hub all tags of mojaloop/role-assignment-service

mojaloop/role-assignment-service:v2.1.0 resolved to def4bf273721, scanned 14 Sept 2026: 180 findings, 0 critical; deployed by 2 charts, among them finance-portal and role-assignment-service.

Radar Score

2,3160437139

180 findings on digest def4bf273721 · scanned 14 Sept 2026

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest
TagDigestUsed byLast seenVulnerabilitiesRadar Score
v2.1.0resolves todef4bf2737212 charts4 days ago04371392,316

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Medium findings

37 distinct on this digest

Medium: findings whose contribution to the Radar Score is 15–39. Show every band

Findings for digest def4bf273721 as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.

SeverityAdvisoryPackageFixed in
MediumGHSA-2p57-rm9w-gvfpip@2.0.0no fix listed
MediumALPINE-CVE-2024-5535openssl@3.1.4-r53.1.6-r0
MediumGHSA-2w6w-674q-4c4qhandlebars@4.7.84.7.9
MediumGHSA-fjxv-7rqg-78g4form-data@3.0.03.0.4
MediumGHSA-5j98-mcp5-4vw2glob@10.3.1010.5.0
MediumALPINE-CVE-2024-4741openssl@3.1.4-r53.1.6-r0
MediumGHSA-43fc-jf86-j433axios@1.6.71.13.5
MediumGHSA-wf6x-7x77-mvgwimmutable@4.3.44.3.8
MediumGHSA-xq3m-2v4x-88ggprotobufjs@7.2.67.5.5
MediumGHSA-35jp-ww65-95whaxios@1.6.71.16.0
MediumALPINE-CVE-2025-9230openssl@3.1.4-r53.1.8-r1
MediumGHSA-rf6f-7fwh-wjghflatted@3.2.23.4.2
MediumGHSA-grv7-fg5c-xmjgbraces@3.0.23.0.3
MediumGHSA-cgfm-xwp7-2cvrsanitize-html@1.27.52.7.1
MediumGHSA-pjwm-pj3p-43mvaxios@0.26.10.32.0
MediumGHSA-jr5f-v2jv-69x6axios@1.6.71.8.2
MediumGHSA-8hc4-vh64-cxmjaxios@1.6.71.7.4
MediumGHSA-4hjh-wcwx-xvwjaxios@1.6.71.12.0
MediumGHSA-282f-qqgm-c34qjsonpointer@4.1.05.0.0
MediumALPINE-CVE-2024-9143openssl@3.1.4-r53.1.7-r1
MediumGHSA-f23m-r3pf-42rhlodash@4.17.214.18.0
MediumGHSA-xxjr-mmjv-4gpglodash@4.17.214.17.23
MediumGHSA-xvcm-6775-5m9rimmutable@4.3.44.3.9
MediumGHSA-5f97-h2c2-826q@apidevtools/json-schema-ref-parser@11.1.011.2.0
MediumALPINE-CVE-2025-9232openssl@3.1.4-r53.1.8-r1
MediumGHSA-v88g-cgmw-v5xwajv@5.5.26.12.3
MediumGHSA-37ch-88jc-xwx2path-to-regexp@0.1.70.1.13
MediumGHSA-9wv6-86v2-598jpath-to-regexp@0.1.70.1.10
MediumGHSA-3mfm-83xf-c92rhandlebars@4.7.84.7.9
MediumGHSA-xhpv-hc6g-r9c6handlebars@4.7.84.7.9
MediumGHSA-99f4-grh7-6pcq@grpc/grpc-js@1.9.141.9.16
MediumGHSA-3xgq-45jj-v275cross-spawn@6.0.56.0.6
MediumGHSA-p92q-9vqr-4j8vaxios@1.6.71.16.0
MediumGHSA-qwcr-r2fm-qrc7body-parser@1.20.11.20.3
MediumGHSA-3ppc-4f35-3m26minimatch@9.0.39.0.6
MediumGHSA-25h7-pfq9-p65fflatted@3.2.23.4.0
MediumGHSA-pf86-5x62-jrwfaxios@1.6.71.15.1

Used by

2 charts
ChartVersionTagContainers
finance-portalmojaloop5.1.4v2.1.01
role-assignment-servicemojaloop3.1.0v2.1.01

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.

syft 1.42.1 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.