All products

ca.uhn.hapi.fhir:org.hl7.fhir.r4b

Maven · Package
8 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
HAPI FHIR: ReDoS via FHIRPath matches()/replaceMatches() in FHIR Validator HTTP EndpointCVE-2026-45367 · GHSA-3653-68V6-RQ57 ca.uhn.hapi.fhir:org.hl7.fhir.dstu2016mayca.uhn.hapi.fhir:org.hl7.fhir.dstu2 MavenRed Hat High Fix reported
org.hl7.fhir.core: ReDoS via FHIRPath matches()/replaceMatches() in FHIR Validator HTTP EndpointCVE-2026-49485 · GHSA-7CMJ-V6X8-FRVV ca.uhn.hapi.fhir:org.hl7.fhir.dstu2016mayca.uhn.hapi.fhir:org.hl7.fhir.dstu2 MavenRed Hat High Fix reported
HL7 FHIR Partial Path Zip Slip due to bypass of CVE-2023-24057CVE-2023-28465 · GHSA-9654-PR4F-GH6M ca.uhn.hapi.fhir:org.hl7.fhir.convertorsca.uhn.hapi.fhir:org.hl7.fhir.core Maven High Fix reported
HAPI FHIR HTTP authentication leak in redirectsCVE-2026-33180 · GHSA-P7M9-V2CM-2H7M ca.uhn.hapi.fhir:org.hl7.fhir.convertorsca.uhn.hapi.fhir:org.hl7.fhir.dstu2016may MavenRed Hat Critical Fix reported
XXE vulnerability in XSLT parsing in `org.hl7.fhir.core`CVE-2024-52007 · GHSA-GR3C-Q7XF-47VH ca.uhn.hapi.fhir:org.hl7.fhir.dstu2016mayca.uhn.hapi.fhir:org.hl7.fhir.dstu3 MavenRed Hat High Fix reported
XXE vulnerability in XSLT transforms in `org.hl7.fhir.core`CVE-2024-45294 · GHSA-6CR6-PH3P-F5RF ca.uhn.hapi.fhir:org.hl7.fhir.dstu2016mayca.uhn.hapi.fhir:org.hl7.fhir.dstu3 MavenRed Hat High Fix reported
HAPI FHIR XML External Entity (XXE) vulnerabilityCVE-2024-51132 · GHSA-4CF2-CXP3-RJR7 ca.uhn.hapi.fhir:org.hl7.fhir.convertorsca.uhn.hapi.fhir:org.hl7.fhir.dstu2016may MavenRed Hat High Fix reported
MITM based Zip Slip in `ca.uhn.hapi.fhir:org.hl7.fhir.core`CVE-2023-24057 · GHSA-JQH6-9574-5X22 ca.uhn.hapi.fhir:org.hl7.fhir.convertorsca.uhn.hapi.fhir:org.hl7.fhir.core Maven Critical Fix reported