ibm-fhir-server Helm chart

Name: ibm-fhir-server Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

alvearie

Scored 24 Sept 2026

Helm chart for the IBM FHIR Server

Latest 0.7.1app version 4.11.1 0Artifact Hub

ibm-fhir-server 0.7.1 deploys 3 container images: bitnami/postgresql, ibmcom/ibm-fhir-server and ibmcom/ibm-fhir-schematool. Across the 2 measured, 727 findings — 17 critical, 71 high — 10 on CISA KEV. The highest contribution is GHSA-599f-7c49-w659 in commons-text 1.9, fixed in 1.10.0.

Radar Score

15,7401771327311

727 findings over 2 of 3 images measured

KEV ×10 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

3 images

Image	Tag	Vulnerabilities	Radar Score
bitnami/postgresql×3	14.2.0	—	unmeasured
ibmcom/ibm-fhir-server	4.11.1	1157268228	12,376
ibmcom/ibm-fhir-schematool	4.11.1	6145983	3,364

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

228 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Severity	Advisory	Package	Fixed in
Low	RHSA-2026:70390	tar@2:1.30-5.el8	2:1.30-13.el8_10
Low	GHSA-p9jm-q85p-7mcp	netty-codec-redis@4.1.76.Final	4.1.136.Final
Low	RHSA-2023:3840	sqlite@3.26.0-15.el8	0:3.26.0-18.el8_8
Low	RHSA-2026:47117	libgcrypt@1.8.5-7.el8_6	0:1.8.5-8.el8_10
Low	RHSA-2024:3163	pam@1.3.1-16.el8	0:1.3.1-33.el8
Low	GHSA-jfg9-48mv-9qgx	netty-codec-mqtt@4.1.76.Final	4.1.133.Final
Low	GHSA-c69g-56f8-xwqj	netty-codec-http2@4.1.76.Final	4.1.136.Final
Low	GHSA-38f8-5428-x5cv	netty-codec-http@4.1.76.Final	4.1.133.Final
Low	RHSA-2026:69655	libxml2@2.9.7-13.el8_6.1	0:2.9.7-21.el8_10.8
Low	RHSA-2026:0728	gnupg2@2.2.20-2.el8	0:2.2.20-4.el8_10
Low	RHSA-2025:15001	krb5@1.18.2-14.el8	0:1.18.2-16.el8_6.4
Low	GHSA-pq67-6m6q-mj2v	urllib3@1.24.2	2.5.0
Low	RHSA-2023:0100	systemd@239-58.el8_6.4	0:239-68.el8_7.1
Low	GHSA-337m-mw94-2v6g	commons-configuration2@2.7	2.15.0
Low	RHSA-2026:48703	vim@2:8.0.1763-19.el8_6.4	2:8.0.1763-31.el8_10
Low	RHSA-2026:36732	python-urllib3@1.24.2-5.el8	0:1.24.2-10.el8_10
Low	GHSA-xq3w-v528-46rv	netty-common@4.1.60.Final	4.1.115.Final
Low	GHSA-8c42-7qj2-3j46	netty-codec-http@4.1.76.Final	4.1.137.Final
Low	GHSA-r7wm-3cxj-wff9	jackson-core@2.11.3	2.18.8
Low	GHSA-3g8r-4pfx-jmfh	netty-codec-stomp@4.1.76.Final	4.1.136.Final
Low	GHSA-389x-839f-4rhx	netty-common@4.1.60.Final	4.1.118.Final
Low	RHSA-2025:8958	libxml2@2.9.7-13.el8_6.1	0:2.9.7-20.el8_10
Low	RHSA-2026:33126	glibc@2.28-189.5.el8_6	0:2.28-251.el8_10.38
Low	GHSA-4mp9-239f-g9hg	netty-codec-http@4.1.76.Final	4.1.136.Final
Low	GHSA-rgrr-p7gp-5xj7	netty-codec-redis@4.1.76.Final	4.1.133.Final
Low	GHSA-65pc-fj4g-8rjx	idna@2.5	3.15
Low	RHSA-2026:54290	python-idna@2.5-5.el8	0:2.5-8.el8_10
Low	RHSA-2026:13285	libcap@2.48-2.el8	0:2.48-6.el8_10.1
Low	GHSA-9wx4-h78v-vm56	requests@2.20.0	2.32.0
Low	RHSA-2025:0012	python-requests@2.20.0-2.1.el8_1	0:2.20.0-5.el8_10
Low	RHSA-2026:64809	expat@2.2.5-8.el8_6.2	0:2.5.0-2.el8_10.2
Low	RHSA-2025:3828	glibc@2.28-189.5.el8_6	0:2.28-251.el8_10.16
Low	RHSA-2026:50077	systemd@239-58.el8_6.4	0:239-58.el8_6.16
Low	RHSA-2026:20587	glibc@2.28-189.5.el8_6	0:2.28-251.el8_10.37
Low	GHSA-5jmj-h7xm-6q6v	jackson-databind@2.13.2.1	2.18.9
Low	GHSA-64x4-9hc6-r2h6	azure-storage-blob@12.14.1	12.18.0
Low	GHSA-hgj6-7826-r7m5	jackson-databind@2.13.2.1	2.18.8
Low	RHSA-2026:43420	acl@2.2.53-1.el8	0:2.4.0-1.el8_10
Low	RHSA-2024:7417	python3@3.6.8-45.el8	0:3.6.8-47.el8_6.7
Low	RHSA-2025:1517	libxml2@2.9.7-13.el8_6.1	0:2.9.7-18.el8_10.2
Low	RHSA-2025:21977	libssh@0.9.6-3.el8	0:0.9.6-16.el8_10
Low	RHSA-2025:17715	vim@2:8.0.1763-19.el8_6.4	2:8.0.1763-21.el8_10
Low	GHSA-562r-vg33-8x8h	postgresql@42.3.3	42.3.8
Low	GHSA-mfg7-5gfp-c4w3	netty-codec-dns@4.1.76.Final	4.1.136.Final
Low	GHSA-qccp-gfcp-xxvc	urllib3@1.24.2	2.7.0
Low	GHSA-v8h7-rr48-vmmv	netty-codec-http@4.1.76.Final	4.1.133.Final
Low	GHSA-gcjf-9mgh-3p7g	netty-codec-http@4.1.76.Final	4.1.136.Final
Low	GHSA-563q-j3cm-6jxm	netty-codec-http2@4.1.76.Final	4.1.135.Final
Low	RHSA-2026:69120	unbound@1.7.3-17.el8	0:1.16.2-5.14.el8_10.2
Low	RHSA-2026:1852	util-linux@2.32.1-35.el8	0:2.32.1-48.el8_10

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.7.1latest	—	4.11.1	1771327311	15,740

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/alvearie/ibm-fhir-server.svg)](https://charts.stackradar.io/charts/alvearie/ibm-fhir-server)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.