Package impact
Maven / ca.uhn.hapi.fhir:org.hl7.fhir.r4
| CVE | Severity | CVSS | Risk | Flags | OS | Vendor | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2026-45367 | high | — | 8.0 | 11d ago | HAPI FHIR: ReDoS via FHIRPath matches()/replaceMatches() in FHIR Validator HTTP Endpoint | |||
| CVE-2026-33180 | high | 7.5 | 7.5 | 2mo ago | HAPI FHIR HTTP authentication leak in redirects | |||
| CVE-2024-52007 | unknown | — | — | 2y ago | XXE vulnerability in XSLT parsing in `org.hl7.fhir.core` | |||
| CVE-2024-51132 | unknown | — | — | 2y ago | HAPI FHIR XML External Entity (XXE) vulnerability | |||
| CVE-2024-45294 | unknown | — | — | 2y ago | XXE vulnerability in XSLT transforms in `org.hl7.fhir.core` |