Login Request a demo
OR
Product
org.hl7.fhir.core
by hapifhir · last CVE Sep 16, 2026
14
CVEs
0
On KEV
9.3
Max CVSS
0
New 30D
Vulnerabilities14In the news0Timeline
Severity mix
Critical 3High 9Medium 2Low 0
Severity
All severities14Critical3High9Medium2Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add org.hl7.fhir.core to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-34361
9.3
0%
Mar 31
HAPI FHIR: Unauthenticated SSRF via /loadIG Chains with startsWith() Credential Leak for Authentication Token Theft
Affected: < 6.9.4
CVE-2026-55471
9.1
1%
Jul 8
HAPI FHIR: XXE in XsltUtilities.saxonTransform via unhardened Saxon TransformerFactory
Affected: < 6.9.10
CVE-2026-34359
9.1
0%
Mar 31
HAPI FHIR: Authentication Credential Leakage via Improper URL Prefix Matching on HTTP Redirect in HAPI FHIR Core
Affected: < 6.9.4
Showing 3