Login Request a demo
OR
Product
org.hl7.fhir.core
by hapifhir · last CVE Sep 16, 2026
14
CVEs
0
On KEV
9.3
Max CVSS
0
New 30D
Vulnerabilities14In the news0Timeline
Severity mix
Critical 3High 9Medium 2Low 0
Severity
All severities14Critical3High9Medium2Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add org.hl7.fhir.core to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-34360
5.8
0%
Mar 31
HAPI FHIR: Unauthenticated Blind SSRF via /loadIG Endpoint Enables Internal Network Probing
Affected: < 6.9.4
CVE-2026-62293
5.0
0%
Aug 7
HAPI FHIR: Stored XSS in scan report via unescaped IG and profile titles
Affected: < 6.9.11
Showing 2