ibm-fhir-server Helm chart
alvearieScored 24 Sept 2026
Helm chart for the IBM FHIR Server
Latest 0.7.1app version 4.11.1 0Artifact Hub
ibm-fhir-server 0.7.1 deploys 3 container images: bitnami/postgresql, ibmcom/ibm-fhir-server and ibmcom/ibm-fhir-schematool. Across the 2 measured, 727 findings — 17 critical, 71 high — 10 on CISA KEV. The highest contribution is GHSA-599f-7c49-w659 in commons-text 1.9, fixed in 1.10.0.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Container images
3 images
| Image | Tag | Vulnerabilities | Radar Score |
|---|---|---|---|
| bitnami/ | 14.2.0 | — | unmeasured |
| ibmcom/ | 4.11.1 | 1157268228 | 12,376 |
| ibmcom/ | 4.11.1 | 6145983 | 3,364 |
Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.
Vulnerabilities
565 distinct across the version’s images
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Medium | GHSA-w37g-rhq8-7m4j | snakeyaml | 1.32 |
| Medium | GHSA-cm33-6792-r9fm | netty-codec-dns | 4.1.133.Final |
| Medium | GHSA-f6hv-jmp6-3vwv | netty-codec-http | 4.1.133.Final |
| Medium | GHSA-f6hv-jmp6-3vwv | netty-codec-http2 | 4.1.133.Final |
| Medium | RHSA-2025:0837 | unbound | 0:1.16.2-5.8.el8_10 |
| Medium | GHSA-jppx-w49h-x2qq | netty-codec-http | 4.1.136.Final |
| Medium | GHSA-q6cq-mhr2-jmr5 | netty-codec-haproxy | 4.1.136.Final |
| Medium | GHSA-g5ww-5jh7-63cx | protobuf-java | 3.19.6 |
| Medium | RHSA-2023:7409 | glibc | 0:2.28-189.8.el8_6 |
| Medium | GHSA-x4gw-5cx5-pgmh | netty-handler | 4.1.135.Final |
| Medium | RHSA-2022:8812 | dbus | 1:1.12.8-18.el8_6.2 |
| Medium | RHSA-2023:0096 | dbus | 1:1.12.8-23.el8_7.1 |
| Medium | RHSA-2026:26354 | libxml2 | 0:2.9.7-21.el8_10.5 |
| Medium | RHSA-2024:3552 | python-idna | 0:2.5-5.el8_6.1 |
| Medium | RHSA-2024:0256 | python3 | 0:3.6.8-56.el8_9.3 |
| Medium | GHSA-2rwm-xv5j-777p | parsson | 1.0.4 |
| Medium | RHSA-2026:67908 | libevent | 0:2.1.8-11.el8_10 |
| Medium | RHSA-2023:4523 | curl | 0:7.61.1-30.el8_8.3 |
| Medium | RHSA-2025:17415 | gnutls | 0:3.6.16-8.el8_10.4 |
| Medium | RHSA-2026:24365 | unbound | 0:1.16.2-5.11.el8_10 |
| Medium | RHSA-2022:8492 | python-chardet | 0:3.0.4-19.module+el8.4.0+9822+20bf1249 |
| Medium | RHSA-2022:8492 | python-requests | 0:2.25.0-2.module+el8.4.0+9822+20bf1249 |
| Medium | RHSA-2022:8492 | python-idna | 0:2.10-3.module+el8.4.0+9822+20bf1249 |
| Medium | RHSA-2022:8492 | python-urllib3 | 0:1.25.10-4.module+el8.5.0+11712+ea2d2be1 |
| Medium | RHSA-2022:8492 | python-pysocks | 0:1.7.1-4.module+el8.4.0+9822+20bf1249 |
| Medium | GHSA-pqr6-cmr2-h8hf | snappy-java | 1.1.10.1 |
| Medium | GHSA-264p-99wq-f4j6 | ion-java | no fix listed |
| Medium | GHSA-jh4v-gfqj-7rhx | amqp-client | 5.34.0 |
| Medium | RHSA-2025:4791 | python-pysocks | 0:1.7.1-4.module+el8.9.0+19644+d68f775d |
| Medium | RHSA-2025:4791 | python-requests | 0:2.25.0-3.module+el8.9.0+19644+d68f775d |
| Medium | RHSA-2025:4791 | python-chardet | 0:3.0.4-19.module+el8.9.0+19644+d68f775d |
| Medium | RHSA-2025:4791 | python-idna | 0:2.10-4.module+el8.10.0+21815+bb024982 |
| Medium | RHSA-2025:4791 | python-urllib3 | 0:1.25.10-5.module+el8.10.0+20443+f0a692fe |
| Medium | GHSA-2x2g-32r7-p4x8 | kafka-clients | 3.7.1 |
| Medium | RHSA-2026:38503 | openssl | 1:1.1.1k-17.el8_6 |
| Medium | GHSA-5xp3-jfq3-5q8x | pip | 21.1 |
| Low | RHSA-2026:1631 | python3 | 0:3.6.8-72.el8_10 |
| Low | RHSA-2023:4498 | dbus | 1:1.12.8-24.el8_8.1 |
| Low | RHSA-2026:4728 | libpng | 2:1.6.34-10.el8_10 |
| Low | RHSA-2026:4730 | libpng | 2:1.6.34-8.el8_6.2 |
| Low | RHSA-2023:3106 | curl | 0:7.61.1-30.el8_8.2 |
| Low | RHSA-2026:7667 | nghttp2 | 0:1.33.0-6.el8_10.2 |
| Low | GHSA-57rv-r2g8-2cj3 | netty-codec-http | 4.1.133.Final |
| Low | RHSA-2024:10379 | pam | 0:1.3.1-36.el8_10 |
| Low | GHSA-6jv9-x5w9-2ccm | netty-codec-redis | 4.1.135.Final |
| Low | RHSA-2026:11077 | python3 | 0:3.6.8-76.el8_10 |
| Low | RHSA-2026:17619 | python3 | 0:3.6.8-47.el8_6.13 |
| Low | RHSA-2026:37282 | unbound | 0:1.16.2-5.12.el8_10 |
| Low | RHSA-2026:34477 | vim | 2:8.0.1763-19.el8_6.6 |
| Low | GHSA-fjpj-2g6w-x25r | snappy-java | 1.1.10.1 |
Indexed versions
The latest version and the previous major, as selected nightly from the repository’s index.
README badge
[](https://charts.stackradar.io/charts/alvearie/ibm-fhir-server)
Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.