FH
Product
fhir-ig-publisher
3
CVEs
0
On KEV
8.6
Max CVSS
0
New 30D
Severity mix
Critical 0High 2Medium 1Low 0
Watch
Add fhir-ig-publisher to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-52807 | 8.6 | Jan 24 | XXE vulnerability in XSLT parsing in `org.hl7.fhir.publisher` Affected: < 1.7.4 |
| CVE-2023-24057 | 8.1 | Jan 26 | HL7 (Health Level 7) FHIR Core Libraries before 5.6.92 allow attackers to extract files into arbitrary directories via directory traversal from a crafted ZIP or TGZ archive (for a… Affected: before 1.2.30 |
| CVE-2025-24363 | 4.2 | Jan 24 | The HL7 FHIR IG publisher may potentially expose GitHub repo user and credential information Affected: < 1.8.9 |
Showing 3