Security
فارسی
All products

ca.uhn.hapi.fhir:org.hl7.fhir.utilities

Maven · Package
8 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
HL7 FHIR Partial Path Zip Slip due to bypass of CVE-2023-24057CVE-2023-28465 · GHSA-9654-PR4F-GH6M ca.uhn.hapi.fhir:org.hl7.fhir.convertorsca.uhn.hapi.fhir:org.hl7.fhir.core Maven High Fix reported
HAPI FHIR: XXE in XsltUtilities.saxonTransform via unhardened Saxon TransformerFactoryCVE-2026-55471 · GHSA-2F55-G35J-5JMF ca.uhn.hapi.fhir:org.hl7.fhir.utilitiesRed Hat build of Apache Camel 4 for Quarkus 3/org.hl7.fhir.utilities MavenRed Hat Critical Fix reported
HAPI FHIR Core has Authentication Credential Leakage via Improper URL Prefix Matching on HTTP RedirectCVE-2026-34359 · GHSA-FGV2-4Q4G-WC35 ca.uhn.hapi.fhir:org.hl7.fhir.coreca.uhn.hapi.fhir:org.hl7.fhir.utilities Maven High Fix reported
HAPI FHIR HTTP authentication leak in redirectsCVE-2026-33180 · GHSA-P7M9-V2CM-2H7M ca.uhn.hapi.fhir:org.hl7.fhir.convertorsca.uhn.hapi.fhir:org.hl7.fhir.dstu2016may MavenRed Hat Critical Fix reported
XXE vulnerability in XSLT parsing in `org.hl7.fhir.core`CVE-2024-52007 · GHSA-GR3C-Q7XF-47VH ca.uhn.hapi.fhir:org.hl7.fhir.dstu2016mayca.uhn.hapi.fhir:org.hl7.fhir.dstu3 MavenRed Hat High Fix reported
XXE vulnerability in XSLT transforms in `org.hl7.fhir.core`CVE-2024-45294 · GHSA-6CR6-PH3P-F5RF ca.uhn.hapi.fhir:org.hl7.fhir.dstu2016mayca.uhn.hapi.fhir:org.hl7.fhir.dstu3 MavenRed Hat High Fix reported
HAPI FHIR XML External Entity (XXE) vulnerabilityCVE-2024-51132 · GHSA-4CF2-CXP3-RJR7 ca.uhn.hapi.fhir:org.hl7.fhir.convertorsca.uhn.hapi.fhir:org.hl7.fhir.dstu2016may MavenRed Hat High Fix reported
MITM based Zip Slip in `ca.uhn.hapi.fhir:org.hl7.fhir.core`CVE-2023-24057 · GHSA-JQH6-9574-5X22 ca.uhn.hapi.fhir:org.hl7.fhir.convertorsca.uhn.hapi.fhir:org.hl7.fhir.core Maven Critical Fix reported