StackRadar

openemr Helm chart

geek-cookbookVerified publisher

Scored 14 Sept 2026

OpenEMR is the most popular open source electronic health records and medical practice management solution.

Latest 5.2.0 3 years agoapp version 6.1.0 0Artifact Hub

openemr 5.2.0 deploys 1 container image: openemr/openemr. Across them, 455 findings8 critical, 22 high 2 on CISA KEV. The highest contribution is ALPINE-CVE-2023-25690 in apache2 2.4.53-r0, fixed in 2.4.56-r0. Chart.yaml declares kubeVersion >=1.16.0-0; rendered for Kubernetes 1.16.0.

Radar Score

8,392822203222

455 findings over 1 of 1 images measured

KEV ×2 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

1 image
ImageTagVulnerabilitiesRadar Score
openemr/openemr6.1.08222032228,392

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

455 distinct across the version’s images
SeverityAdvisoryPackageFixed in
LowGHSA-c2p3-7m5p-cv8xsymfony/yaml@v4.4.375.4.52
LowGHSA-94g3-g5v7-q4jgphpseclib/phpseclib@2.0.352.0.52
LowGHSA-6v7p-g79w-8964msgpack@1.0.21.2.1
LowGHSA-wh5w-82f3-wrxhckeditor4@4.17.14.24.0-lts
LowGHSA-23c5-xmqv-rm74minimatch@3.0.43.1.4
LowGHSA-qpx9-hpmf-5gmwunderscore@1.13.21.13.8
LowGHSA-mh99-v99m-4gvgbrace-expansion@1.1.111.1.17
LowGHSA-73rr-hh4g-fpgxdiff@5.0.05.2.2
LowALPINE-CVE-2021-36411libde265@1.0.8-r11.0.8-r2
LowGHSA-r6ph-v2qm-q3c2cryptography@36.0.246.0.5
LowGHSA-f5gf-2cj8-52g2dompdf/dompdf@v1.1.13.1.6
LowALPINE-CVE-2023-27102libde265@1.0.8-r11.0.11-r1
LowGHSA-5qj8-6xxj-hp9hdompdf/dompdf@v1.1.12.0.0
LowGHSA-8x88-c5mf-7j5wtar@6.1.117.5.18
LowALPINE-CVE-2022-47655libde265@1.0.8-r11.0.11-r0
LowGHSA-wxmh-65f7-jcvwguzzlehttp/psr7@2.1.02.4.5
LowALPINE-CVE-2023-23936nodejs@16.14.0-r016.19.1-r0
LowGHSA-2xf4-cg6j-vhgqsymfony/polyfill-intl-idn@v1.24.01.38.1
LowALPINE-CVE-2022-26691cups@2.3.3-r52.3.3-r6
LowGHSA-hwq7-5vv9-c6cfsmarty/smarty@v2.6.333.1.47
LowGHSA-6hq5-7373-42rgphpoffice/phpspreadsheet@1.21.01.30.6
LowGHSA-pr2w-4gpj-cpq4twig/twig@v3.3.83.26.0
LowGHSA-43fp-rhv2-5gv8certifi@2020.12.52022.12.07
LowGHSA-7c6m-4442-2x6mphpoffice/phpspreadsheet@1.21.01.30.4
LowGHSA-84wq-86v6-x5j6phpoffice/phpspreadsheet@1.21.01.30.4
LowPYSEC-2026-3553cryptography@36.0.249.0.0
LowGHSA-wf93-45jw-7689pip@22.0.426.1.2
LowGHSA-r6q2-hw4h-h46wtar@6.1.117.5.4
LowGHSA-2mrg-gjxq-2gvrphpoffice/phpspreadsheet@1.21.01.30.6
LowGHSA-r292-9mhp-454mtar@6.1.117.5.21
LowGHSA-xh5m-36r6-47m3phpoffice/phpspreadsheet@1.21.01.30.6
LowGHSA-fq6h-4g8v-qqvmckeditor4@4.17.14.24.0-lts
LowGHSA-ff7q-6vwh-v9m4phpseclib/phpseclib@2.0.352.0.46
LowGHSA-w5hq-g745-h8pquuid@8.3.211.1.1
LowGHSA-w4pp-8pjf-rmxwpacote@12.0.221.5.1
LowGHSA-9hjg-9r4m-mvj7requests@2.26.02.32.4
LowGHSA-pf6p-25r2-fx45dompdf/dompdf@v1.1.12.0.0
LowGHSA-x88g-h956-m5xgphpoffice/phpspreadsheet@1.21.01.29.7
LowALPINE-CVE-2021-36410libde265@1.0.8-r11.0.8-r2
LowGHSA-vqc8-7275-q272symfony/mime@v5.4.35.4.52
LowGHSA-9ppj-qmqm-q256tar@6.1.117.5.11
LowALPINE-CVE-2021-36408libde265@1.0.8-r11.0.8-r2
LowGHSA-cq55-c7wv-pxmqsmarty/smarty@v2.6.334.5.7
LowGHSA-ff5x-7qg5-vwf2phenx/php-svg-lib@0.3.40.5.1
LowGHSA-8hg6-c449-896mdompdf/dompdf@v1.1.13.1.6
LowGHSA-f6wf-28g6-769xsmarty/smarty@v2.6.334.5.7
LowALPINE-CVE-2023-40217python3@3.9.7-r43.9.18-r0
LowGHSA-c6fv-7vh8-2rhrphpoffice/phpspreadsheet@1.21.01.29.7
LowGHSA-j2xg-cjcx-4677phpoffice/phpspreadsheet@1.21.01.29.7
LowGHSA-f886-m6hf-6m8vbrace-expansion@1.1.111.1.13

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
5.2.0latest3 years ago6.1.08222032228,392

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/geek-cookbook/openemr.svg)](https://charts.stackradar.io/charts/geek-cookbook/openemr)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 6 Sept 2026 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.