StackRadar

ibm-fhir-server 0.7.1 Helm chart

alvearie

Scored 24 Sept 2026

Helm chart for the IBM FHIR Server

Version 0.7.1app version 4.11.1 0Artifact Hub

ibm-fhir-server 0.7.1 deploys 3 container images: bitnami/postgresql, ibmcom/ibm-fhir-server and ibmcom/ibm-fhir-schematool. Across the 2 measured, 727 findings17 critical, 71 high 10 on CISA KEV. The highest contribution is GHSA-599f-7c49-w659 in commons-text 1.9, fixed in 1.10.0.

Radar Score

15,7401771327311

727 findings over 2 of 3 images measured

KEV ×10 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

3 images
ImageTagVulnerabilitiesRadar Score
bitnami/postgresql×314.2.0unmeasured
ibmcom/ibm-fhir-server4.11.1115726822812,376
ibmcom/ibm-fhir-schematool4.11.161459833,364

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

565 distinct across the version’s images
SeverityAdvisoryPackageFixed in
LowRHSA-2026:2389brotli@1.0.6-3.el80:1.0.6-4.el8_10
LowGHSA-h4h5-3hr4-j3g2protobuf-java@3.19.43.19.6
LowGHSA-hhhw-99gj-p3c3snakeyaml@1.301.31
LowRHSA-2025:14135libarchive@3.3.3-3.el8_50:3.3.3-6.el8_10
LowRHSA-2026:2128python3@3.6.8-45.el80:3.6.8-73.el8_10
LowRHSA-2026:5215python3@3.6.8-45.el80:3.6.8-47.el8_6.11
LowRHSA-2025:23383curl@7.61.1-22.el8_6.40:7.61.1-34.el8_10.9
LowRHSA-2024:0119libxml2@2.9.7-13.el8_6.10:2.9.7-18.el8_9
LowGHSA-c653-97m9-rcg9netty-handler@4.1.60.Final4.1.135.Final
LowGHSA-5jpm-x58v-624vnetty-codec-http@4.1.76.Final4.1.108.Final
LowGHSA-676x-f7gg-47vcnetty-resolver-dns@4.1.76.Final4.1.135.Final
LowGHSA-3p8m-j85q-pgmjnetty-codec@4.1.60.Final4.1.125.Final
LowRHSA-2026:28553vim@2:8.0.1763-19.el8_6.42:8.0.1763-24.el8_10
LowGHSA-3244-j874-rhc2netty-codec-redis@4.1.76.Final4.1.135.Final
LowGHSA-5w86-c3rq-vjj7netty-codec-redis@4.1.76.Final4.1.135.Final
LowGHSA-6ghj-frrj-jjj3netty-codec-redis@4.1.76.Final4.1.135.Final
LowGHSA-mj4r-2hfc-f8p6netty-codec@4.1.60.Final4.1.133.Final
LowRHSA-2026:22721expat@2.2.5-8.el8_6.20:2.5.0-2.el8_10
LowGHSA-3wrr-7qpf-2prhjackson-databind@2.13.2.12.14.0
LowRHSA-2025:4051gnutls@3.6.16-4.el80:3.6.16-8.el8_10.3
LowGHSA-v74w-7mr3-4qg3netty-codec-xml@4.1.76.Final4.1.136.Final
LowRHSA-2025:8686glibc@2.28-189.5.el8_60:2.28-251.el8_10.22
LowRHSA-2023:5252dmidecode@1:3.3-4.el81:3.3-4.el8_8.1
LowGHSA-93wv-jw9v-4972netty-codec-http2@4.1.76.Final4.1.136.Final
LowGHSA-6jqx-86gh-f27wnetty-codec-http@4.1.76.Final4.1.136.Final
LowGHSA-mvh2-crg5-v77cnetty-codec-http@4.1.76.Final4.1.136.Final
LowGHSA-vhch-2wf3-m8rpnetty-codec-stomp@4.1.76.Final4.1.136.Final
LowRHSA-2024:3203systemd@239-58.el8_6.40:239-82.el8
LowGHSA-269q-hmxg-m83qnetty-codec-http@4.1.76.Final4.1.77.Final
LowGHSA-558v-64gr-wgg4netty-codec@4.1.60.Final4.1.136.Final
LowRHSA-2025:12450libxml2@2.9.7-13.el8_6.10:2.9.7-21.el8_10.2
LowRHSA-2025:4049libtasn1@4.13-3.el80:4.13-5.el8_10
LowRHSA-2024:1751unbound@1.7.3-17.el80:1.16.2-5.el8_9.6
LowRHSA-2026:57462curl@7.61.1-22.el8_6.40:7.61.1-34.el8_10.13
LowRHSA-2024:10779python3@3.6.8-45.el80:3.6.8-69.el8_10
LowGHSA-wf93-45jw-7689pip@9.0.326.1.2
LowRHSA-2024:3347python3@3.6.8-45.el80:3.6.8-62.el8_10
LowRHSA-2024:4406python3@3.6.8-45.el80:3.6.8-47.el8_6.6
LowGHSA-2qj4-mmr9-4v2fnetty-transport-sctp@4.1.76.Final4.1.137.Final
LowRHSA-2024:3233libssh@0.9.6-3.el80:0.9.6-14.el8
LowRHSA-2026:62218libssh@0.9.6-3.el80:0.9.6-17.el8_10
LowRHSA-2026:0241libpng@2:1.6.34-5.el82:1.6.34-9.el8_10
LowRHSA-2026:0322libpng@2:1.6.34-5.el82:1.6.34-8.el8_6.1
LowRHSA-2026:0991glib2@2.56.4-158.el80:2.56.4-168.el8_10
LowGHSA-9hjg-9r4m-mvj7requests@2.20.02.32.4
LowRHSA-2025:13234python-requests@2.20.0-2.1.el8_10:2.20.0-6.el8_10
LowRHSA-2023:3839libssh@0.9.6-3.el80:0.9.6-10.el8_8
LowRHSA-2023:0837systemd@239-58.el8_6.40:239-68.el8_7.4
LowRHSA-2025:2722krb5@1.18.2-14.el80:1.18.2-31.el8_10
LowRHSA-2024:0424rpm@4.14.3-23.el80:4.14.3-26.el8_6

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
0.7.1latest4.11.1177132731115,740

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/alvearie/ibm-fhir-server.svg)](https://charts.stackradar.io/charts/alvearie/ibm-fhir-server)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 24 Sept 2026 · scanned 24 Sept 2026 · advisories as of 24 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.