Critical: Red Hat Security Advisory: Red Hat Build of Apache Camel 4.4.4 for Spring Boot security update.

Red Hat build of Apache Camel 4.4.4 for Spring Boot release and security update is now available. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

CVE-2024-52007 XXE vulnerability in XSLT parsing in `org.hl7.fhir.core`

HAPI FHIR is a complete implementation of the HL7 FHIR standard for healthcare interoperability in Java. XSLT parsing performed by various components are vulnerable to XML external entity injections. A processed XML file with a malicious DTD tag could produce XML containing data from the host...

CVE-2024-52007 XXE vulnerability in XSLT parsing in `org.hl7.fhir.core`

HAPI FHIR is a complete implementation of the HL7 FHIR standard for healthcare interoperability in Java. XSLT parsing performed by various components are vulnerable to XML external entity injections. A processed XML file with a malicious DTD tag could produce XML containing data from the host...

au.csiro.pathling:encoders (>=5.1.0, <=7.1.0), au.csiro.pathling:fhir-server (>=5.3.1, <=7.1.0) +316 more potentially affected by CVE-2024-52007 via ca.uhn.hapi.fhir:org.hl7.fhir.utilities (>=0.0.1, <=6.3.32)

ca.uhn.hapi.fhir:org.hl7.fhir.utilities MAVEN version =0.0.1, =5.1.0, =5.3.1, =6.2.1, =5.3.1, =5.3.1, =5.3.0, =0.0.9, =5.6.5, =5.6.5, =5.6.5, =3.4.0, =5.6.5, =4.1.0, =4.0.3, =4.1.0, =7.4.5 and more Source cves: CVE-2024-52007 Source advisory: MEND:CVE-2024-52007...

au.csiro.pathling:encoders (>=5.1.0, <=7.1.0), au.csiro.pathling:fhir-server (>=5.3.1, <=7.1.0) +288 more potentially affected by CVE-2024-52007 via ca.uhn.hapi.fhir:org.hl7.fhir.r4 (>=0.0.1, <=6.3.32)

ca.uhn.hapi.fhir:org.hl7.fhir.r4 MAVEN version =0.0.1, =5.1.0, =5.3.1, =6.2.1, =5.3.1, =5.3.1, =5.3.0, =0.0.9, =5.6.5, =4.0.0, =5.6.5, =4.1.0, =4.0.3, =4.1.0, =4.0.0, =4.0.0, =7.4.5 and more Source cves: CVE-2024-52007 Source advisory: MEND:CVE-2024-52007...

ca.uhn.hapi.fhir:org.hl7.fhir.convertors (5.6.25), ca.uhn.hapi.fhir:org.hl7.fhir.validation (5.6.25) potentially affected by CVE-2024-52007 via ca.uhn.hapi.fhir:org.hl7.fhir.r5 (5.6.25)

ca.uhn.hapi.fhir:org.hl7.fhir.r5 MAVEN version 5.6.25 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:org.hl7.fhir.r5 and may be impacted: - ca.uhn.hapi.fhir:org.hl7.fhir.convertors 5.6.25 - ca.uhn.hapi.fhir:org.hl7.fhir.validation...

ca.uhn.hapi.fhir:org.hl7.fhir.convertors (5.6.34), ca.uhn.hapi.fhir:org.hl7.fhir.validation (5.6.34) potentially affected by CVE-2024-52007 via ca.uhn.hapi.fhir:org.hl7.fhir.dstu2016may (5.6.34)

ca.uhn.hapi.fhir:org.hl7.fhir.dstu2016may MAVEN version 5.6.34 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:org.hl7.fhir.dstu2016may and may be impacted: - ca.uhn.hapi.fhir:org.hl7.fhir.convertors 5.6.34 -...

ca.uhn.hapi.fhir:org.hl7.fhir.convertors (5.6.53), ca.uhn.hapi.fhir:org.hl7.fhir.validation (5.6.53) +3 more potentially affected by CVE-2024-52007 via ca.uhn.hapi.fhir:org.hl7.fhir.dstu2016may (5.6.53)

ca.uhn.hapi.fhir:org.hl7.fhir.dstu2016may MAVEN version 5.6.53 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:org.hl7.fhir.dstu2016may and may be impacted: - ca.uhn.hapi.fhir:org.hl7.fhir.convertors 5.6.53 -...

ca.uhn.hapi.fhir:org.hl7.fhir.convertors (5.6.12), ca.uhn.hapi.fhir:org.hl7.fhir.validation (5.6.12) potentially affected by CVE-2024-52007 via ca.uhn.hapi.fhir:org.hl7.fhir.dstu2016may (5.6.12)

ca.uhn.hapi.fhir:org.hl7.fhir.dstu2016may MAVEN version 5.6.12 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:org.hl7.fhir.dstu2016may and may be impacted: - ca.uhn.hapi.fhir:org.hl7.fhir.convertors 5.6.12 -...

ca.uhn.hapi.fhir:org.hl7.fhir.convertors (5.6.90), ca.uhn.hapi.fhir:org.hl7.fhir.validation (5.6.90) +3 more potentially affected by CVE-2024-52007 via ca.uhn.hapi.fhir:org.hl7.fhir.dstu2016may (5.6.90)

ca.uhn.hapi.fhir:org.hl7.fhir.dstu2016may MAVEN version 5.6.90 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:org.hl7.fhir.dstu2016may and may be impacted: - ca.uhn.hapi.fhir:org.hl7.fhir.convertors 5.6.90 -...

ca.uhn.hapi.fhir:org.hl7.fhir.convertors (5.1.13), ca.uhn.hapi.fhir:org.hl7.fhir.validation (5.1.13) +3 more potentially affected by CVE-2024-52007 via ca.uhn.hapi.fhir:org.hl7.fhir.r4 (5.1.13)

ca.uhn.hapi.fhir:org.hl7.fhir.r4 MAVEN version 5.1.13 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:org.hl7.fhir.r4 and may be impacted: - ca.uhn.hapi.fhir:org.hl7.fhir.convertors 5.1.13 - ca.uhn.hapi.fhir:org.hl7.fhir.validation...

ca.uhn.hapi.fhir:org.hl7.fhir.convertors (5.0.20), ca.uhn.hapi.fhir:org.hl7.fhir.validation (5.0.20) potentially affected by CVE-2024-52007 via ca.uhn.hapi.fhir:org.hl7.fhir.dstu3 (5.0.20)

ca.uhn.hapi.fhir:org.hl7.fhir.dstu3 MAVEN version 5.0.20 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:org.hl7.fhir.dstu3 and may be impacted: - ca.uhn.hapi.fhir:org.hl7.fhir.convertors 5.0.20 - ca.uhn.hapi.fhir:org.hl7.fhir.validati...

ca.uhn.hapi.fhir:org.hl7.fhir.convertors (5.2.19), ca.uhn.hapi.fhir:org.hl7.fhir.validation (5.2.19) potentially affected by CVE-2024-52007 via ca.uhn.hapi.fhir:org.hl7.fhir.dstu3 (5.2.19)

ca.uhn.hapi.fhir:org.hl7.fhir.dstu3 MAVEN version 5.2.19 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:org.hl7.fhir.dstu3 and may be impacted: - ca.uhn.hapi.fhir:org.hl7.fhir.convertors 5.2.19 - ca.uhn.hapi.fhir:org.hl7.fhir.validati...

ca.uhn.hapi.fhir:org.hl7.fhir.convertors (5.6.89), ca.uhn.hapi.fhir:org.hl7.fhir.validation (5.6.89) +3 more potentially affected by CVE-2024-52007 via ca.uhn.hapi.fhir:org.hl7.fhir.r4b (5.6.89)

ca.uhn.hapi.fhir:org.hl7.fhir.r4b MAVEN version 5.6.89 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:org.hl7.fhir.r4b and may be impacted: - ca.uhn.hapi.fhir:org.hl7.fhir.convertors 5.6.89 - ca.uhn.hapi.fhir:org.hl7.fhir.validation...

ca.uhn.hapi.fhir:org.hl7.fhir.convertors (5.1.19), ca.uhn.hapi.fhir:org.hl7.fhir.validation (5.1.19) +3 more potentially affected by CVE-2024-52007 via ca.uhn.hapi.fhir:org.hl7.fhir.r5 (5.1.19)

ca.uhn.hapi.fhir:org.hl7.fhir.r5 MAVEN version 5.1.19 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:org.hl7.fhir.r5 and may be impacted: - ca.uhn.hapi.fhir:org.hl7.fhir.convertors 5.1.19 - ca.uhn.hapi.fhir:org.hl7.fhir.validation...

ca.uhn.hapi.fhir:org.hl7.fhir.convertors (5.2.11), ca.uhn.hapi.fhir:org.hl7.fhir.validation (5.2.11) potentially affected by CVE-2024-52007 via ca.uhn.hapi.fhir:org.hl7.fhir.dstu2016may (5.2.11)

ca.uhn.hapi.fhir:org.hl7.fhir.dstu2016may MAVEN version 5.2.11 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:org.hl7.fhir.dstu2016may and may be impacted: - ca.uhn.hapi.fhir:org.hl7.fhir.convertors 5.2.11 -...

ca.uhn.hapi.fhir:org.hl7.fhir.convertors (5.6.73), ca.uhn.hapi.fhir:org.hl7.fhir.validation (5.6.73) +3 more potentially affected by CVE-2024-52007 via ca.uhn.hapi.fhir:org.hl7.fhir.dstu2016may (5.6.73)

ca.uhn.hapi.fhir:org.hl7.fhir.dstu2016may MAVEN version 5.6.73 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:org.hl7.fhir.dstu2016may and may be impacted: - ca.uhn.hapi.fhir:org.hl7.fhir.convertors 5.6.73 -...

ca.uhn.hapi.fhir:org.hl7.fhir.convertors (5.6.111), ca.uhn.hapi.fhir:org.hl7.fhir.validation (5.6.111) +3 more potentially affected by CVE-2024-52007 via ca.uhn.hapi.fhir:org.hl7.fhir.dstu2016may (5.6.111)

ca.uhn.hapi.fhir:org.hl7.fhir.dstu2016may MAVEN version 5.6.111 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:org.hl7.fhir.dstu2016may and may be impacted: - ca.uhn.hapi.fhir:org.hl7.fhir.convertors 5.6.111 -...

ca.uhn.hapi.fhir:org.hl7.fhir.convertors (5.6.110), ca.uhn.hapi.fhir:org.hl7.fhir.validation (5.6.110) +3 more potentially affected by CVE-2024-52007 via ca.uhn.hapi.fhir:org.hl7.fhir.dstu2016may (5.6.110)

ca.uhn.hapi.fhir:org.hl7.fhir.dstu2016may MAVEN version 5.6.110 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:org.hl7.fhir.dstu2016may and may be impacted: - ca.uhn.hapi.fhir:org.hl7.fhir.convertors 5.6.110 -...

ca.uhn.hapi.fhir:org.hl7.fhir.convertors (5.6.114), ca.uhn.hapi.fhir:org.hl7.fhir.validation (5.6.114) +3 more potentially affected by CVE-2024-52007 via ca.uhn.hapi.fhir:org.hl7.fhir.dstu2016may (5.6.114)

ca.uhn.hapi.fhir:org.hl7.fhir.dstu2016may MAVEN version 5.6.114 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:org.hl7.fhir.dstu2016may and may be impacted: - ca.uhn.hapi.fhir:org.hl7.fhir.convertors 5.6.114 -...