HF
Product
Hl7 Fhir Core
7
CVEs
0
On KEV
9.3
Max CVSS
0
New 30D
Severity mix
Critical 3High 3Medium 1Low 0
Watch
Add Hl7 Fhir Core to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-34361 | 9.3 | Mar 31 | HAPI FHIR: Unauthenticated SSRF via /loadIG Chains with startsWith() Credential Leak for Authentication Token Theft Affected: before 6.9.4 |
| CVE-2026-55471 | 9.1 | Jul 8 | HAPI FHIR: XXE in XsltUtilities.saxonTransform via unhardened Saxon TransformerFactory Affected: before 6.9.10 |
| CVE-2026-34359 | 9.1 | Mar 31 | HAPI FHIR: Authentication Credential Leakage via Improper URL Prefix Matching on HTTP Redirect in HAPI FHIR Core Affected: before 6.9.4 |
Showing 3