StackRadar

ibm-fhir-server 0.7.1 Helm chart

alvearie

Scored 24 Sept 2026

Helm chart for the IBM FHIR Server

Version 0.7.1app version 4.11.1 0Artifact Hub

ibm-fhir-server 0.7.1 deploys 3 container images: bitnami/postgresql, ibmcom/ibm-fhir-server and ibmcom/ibm-fhir-schematool. Across the 2 measured, 727 findings17 critical, 71 high 10 on CISA KEV. The highest contribution is GHSA-599f-7c49-w659 in commons-text 1.9, fixed in 1.10.0.

Radar Score

15,7401771327311

727 findings over 2 of 3 images measured

KEV ×10 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

3 images
ImageTagVulnerabilitiesRadar Score
bitnami/postgresql×314.2.0unmeasured
ibmcom/ibm-fhir-server4.11.1115726822812,376
ibmcom/ibm-fhir-schematool4.11.161459833,364

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

228 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

SeverityAdvisoryPackageFixed in
LowRHSA-2024:3268krb5@1.18.2-14.el80:1.18.2-27.el8_10
LowRHSA-2026:42090glib2@2.56.4-158.el80:2.56.4-170.el8_10
LowRHSA-2026:66348vim@2:8.0.1763-19.el8_6.42:8.0.1763-31.el8_10.7
LowRHSA-2026:15953glib2@2.56.4-158.el80:2.56.4-169.el8_10
LowRHSA-2026:19524glib2@2.56.4-158.el80:2.56.4-158.el8_6.5
LowGHSA-fx2c-96vj-985vnetty-codec-haproxy@4.1.76.Final4.1.86.Final
LowRHSA-2023:4529libxml2@2.9.7-13.el8_6.10:2.9.7-16.el8_8.1
LowRHSA-2025:10027pam@1.3.1-16.el80:1.3.1-37.el8_10
LowRHSA-2025:14557pam@1.3.1-16.el80:1.3.1-38.el8_10
LowRHSA-2022:7715libxml2@2.9.7-13.el8_6.10:2.9.7-15.el8
LowRHSA-2026:38510vim@2:8.0.1763-19.el8_6.42:8.0.1763-27.el8_10
LowGHSA-c4c3-7fpv-j4q5netty-handler@4.1.60.Final4.1.137.Final
LowRHSA-2024:9502expat@2.2.5-8.el8_6.20:2.2.5-16.el8_10
LowGHSA-4qhr-g3c6-fcfxnetty-codec-xml@4.1.76.Final4.1.136.Final
LowRHSA-2026:2389brotli@1.0.6-3.el80:1.0.6-4.el8_10
LowGHSA-h4h5-3hr4-j3g2protobuf-java@3.19.43.19.6
LowGHSA-hhhw-99gj-p3c3snakeyaml@1.301.31
LowRHSA-2025:14135libarchive@3.3.3-3.el8_50:3.3.3-6.el8_10
LowRHSA-2026:2128python3@3.6.8-45.el80:3.6.8-73.el8_10
LowRHSA-2026:5215python3@3.6.8-45.el80:3.6.8-47.el8_6.11
LowRHSA-2025:23383curl@7.61.1-22.el8_6.40:7.61.1-34.el8_10.9
LowRHSA-2024:0119libxml2@2.9.7-13.el8_6.10:2.9.7-18.el8_9
LowGHSA-c653-97m9-rcg9netty-handler@4.1.60.Final4.1.135.Final
LowGHSA-5jpm-x58v-624vnetty-codec-http@4.1.76.Final4.1.108.Final
LowGHSA-676x-f7gg-47vcnetty-resolver-dns@4.1.76.Final4.1.135.Final
LowGHSA-3p8m-j85q-pgmjnetty-codec@4.1.60.Final4.1.125.Final
LowRHSA-2026:28553vim@2:8.0.1763-19.el8_6.42:8.0.1763-24.el8_10
LowGHSA-3244-j874-rhc2netty-codec-redis@4.1.76.Final4.1.135.Final
LowGHSA-5w86-c3rq-vjj7netty-codec-redis@4.1.76.Final4.1.135.Final
LowGHSA-6ghj-frrj-jjj3netty-codec-redis@4.1.76.Final4.1.135.Final
LowGHSA-mj4r-2hfc-f8p6netty-codec@4.1.60.Final4.1.133.Final
LowRHSA-2026:22721expat@2.2.5-8.el8_6.20:2.5.0-2.el8_10
LowGHSA-3wrr-7qpf-2prhjackson-databind@2.13.2.12.14.0
LowRHSA-2025:4051gnutls@3.6.16-4.el80:3.6.16-8.el8_10.3
LowGHSA-v74w-7mr3-4qg3netty-codec-xml@4.1.76.Final4.1.136.Final
LowRHSA-2025:8686glibc@2.28-189.5.el8_60:2.28-251.el8_10.22
LowRHSA-2023:5252dmidecode@1:3.3-4.el81:3.3-4.el8_8.1
LowGHSA-93wv-jw9v-4972netty-codec-http2@4.1.76.Final4.1.136.Final
LowGHSA-6jqx-86gh-f27wnetty-codec-http@4.1.76.Final4.1.136.Final
LowGHSA-mvh2-crg5-v77cnetty-codec-http@4.1.76.Final4.1.136.Final
LowGHSA-vhch-2wf3-m8rpnetty-codec-stomp@4.1.76.Final4.1.136.Final
LowRHSA-2024:3203systemd@239-58.el8_6.40:239-82.el8
LowGHSA-269q-hmxg-m83qnetty-codec-http@4.1.76.Final4.1.77.Final
LowGHSA-558v-64gr-wgg4netty-codec@4.1.60.Final4.1.136.Final
LowRHSA-2025:12450libxml2@2.9.7-13.el8_6.10:2.9.7-21.el8_10.2
LowRHSA-2025:4049libtasn1@4.13-3.el80:4.13-5.el8_10
LowRHSA-2024:1751unbound@1.7.3-17.el80:1.16.2-5.el8_9.6
LowRHSA-2026:57462curl@7.61.1-22.el8_6.40:7.61.1-34.el8_10.13
LowRHSA-2024:10779python3@3.6.8-45.el80:3.6.8-69.el8_10
LowGHSA-wf93-45jw-7689pip@9.0.326.1.2

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
0.7.1latest4.11.1177132731115,740

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/alvearie/ibm-fhir-server.svg)](https://charts.stackradar.io/charts/alvearie/ibm-fhir-server)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 24 Sept 2026 · scanned 24 Sept 2026 · advisories as of 24 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.