HF
Product
Hl7 Fhir Core
7
CVEs
0
On KEV
9.3
Max CVSS
0
New 30D
Severity mix
Critical 3High 3Medium 1Low 0
Watch
Add Hl7 Fhir Core to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-24057 | 8.1 | Jan 26 | HL7 (Health Level 7) FHIR Core Libraries before 5.6.92 allow attackers to extract files into arbitrary directories via directory traversal from a crafted ZIP or TGZ archive (for a… Affected: before 5.6.92 |
| CVE-2026-55470 | 7.5 | Jul 8 | HAPI FHIR: DSTU2 FHIRPathEngine.matches() missing RegexTimeout protection allows ReDoS Affected: before 6.9.10 |
| CVE-2023-28465 | 7.5 | Dec 12 | The package-decompression feature in HL7 (Health Level 7) FHIR Core Libraries before 5.6.106 allows attackers to copy arbitrary files to certain directories via directory… Affected: before 5.6.106 |
Showing 3