Security
فارسی
All products

ca.uhn.hapi.fhir:org.hl7.fhir.validation

Maven · Package
10 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
HAPI FHIR: SHCParser DEFLATE infinite loop causes denial of serviceCVE-2026-81876 · GHSA-GQ9C-WMRM-5HVR ca.uhn.hapi.fhir:org.hl7.fhir.r5ca.uhn.hapi.fhir:org.hl7.fhir.validation.cli Maven High Fix reported
HAPI FHIR: SHCParser unbounded DEFLATE decompression causes denial of serviceCVE-2026-81875 · GHSA-3W98-RRPR-FPRR ca.uhn.hapi.fhir:org.hl7.fhir.r5ca.uhn.hapi.fhir:org.hl7.fhir.validation.cli Maven High Fix reported
HAPI FHIR: ReDoS via FHIRPath matches()/replaceMatches() in FHIR Validator HTTP EndpointCVE-2026-45367 · GHSA-3653-68V6-RQ57 ca.uhn.hapi.fhir:org.hl7.fhir.dstu2016mayca.uhn.hapi.fhir:org.hl7.fhir.dstu2 MavenRed Hat High Fix reported
org.hl7.fhir.core: ReDoS via FHIRPath matches()/replaceMatches() in FHIR Validator HTTP EndpointCVE-2026-49485 · GHSA-7CMJ-V6X8-FRVV ca.uhn.hapi.fhir:org.hl7.fhir.dstu2016mayca.uhn.hapi.fhir:org.hl7.fhir.dstu2 MavenRed Hat High Fix reported
HL7 FHIR Partial Path Zip Slip due to bypass of CVE-2023-24057CVE-2023-28465 · GHSA-9654-PR4F-GH6M ca.uhn.hapi.fhir:org.hl7.fhir.convertorsca.uhn.hapi.fhir:org.hl7.fhir.core Maven High Fix reported
HAPI FHIR: Incomplete fix for CVE-2026-45367: DSTU2 FHIRPathEngine.matches() missing RegexTimeout protection allows ReDoSCVE-2026-55470 · GHSA-FXJ4-P9XP-37V5 ca.uhn.hapi.fhir:org.hl7.fhir.convertorsca.uhn.hapi.fhir:org.hl7.fhir.dstu2 MavenRed Hat High Fix reported
FHIR Validator HTTP service has SSRF via /loadIG Chains with startsWith() Credential Leak for Authentication Token TheftCVE-2026-34361 · GHSA-VR79-8M62-WH98 ca.uhn.hapi.fhir:org.hl7.fhir.validation Maven Critical Fix reported
HAPI FHIR HTTP authentication leak in redirectsCVE-2026-33180 · GHSA-P7M9-V2CM-2H7M ca.uhn.hapi.fhir:org.hl7.fhir.convertorsca.uhn.hapi.fhir:org.hl7.fhir.dstu2016may MavenRed Hat Critical Fix reported
HAPI FHIR XML External Entity (XXE) vulnerabilityCVE-2024-51132 · GHSA-4CF2-CXP3-RJR7 ca.uhn.hapi.fhir:org.hl7.fhir.convertorsca.uhn.hapi.fhir:org.hl7.fhir.dstu2016may MavenRed Hat High Fix reported
MITM based Zip Slip in `ca.uhn.hapi.fhir:org.hl7.fhir.core`CVE-2023-24057 · GHSA-JQH6-9574-5X22 ca.uhn.hapi.fhir:org.hl7.fhir.convertorsca.uhn.hapi.fhir:org.hl7.fhir.core Maven Critical Fix reported