ca.uhn.hapi.fhir:hapi-fhir-cli-api (>=7.2.0, <=7.4.5), ca.uhn.hapi.fhir:hapi-fhir-cli-app (>=7.2.0, <=7.4.5) +409 more potentially affected by CVE-2023-7272 via org.eclipse.parsson:parsson (>=1.0.0, <=1.0.3)

org.eclipse.parsson:parsson MAVEN version =1.0.0, =7.2.0, =7.2.0, =7.2.0, =7.2.0, =7.2.0, =7.2.0, =7.2.0, =7.2.0, =7.2.0, =1.0, =0.3.8, =0.3.0, =0.2.3, =1.1.0, =1.4.4 and more Source cves: CVE-2023-7272 Source advisory: GHSA-2RWM-XV5J-777P...

ca.uhn.hapi.fhir:hapi-fhir-cli-api (>=7.2.0, <=7.4.5), ca.uhn.hapi.fhir:hapi-fhir-cli-app (>=7.2.0, <=7.4.5) +409 more potentially affected by CVE-2023-7272 via org.eclipse.parsson:parsson (>=1.0.0, <=1.0.3)

org.eclipse.parsson:parsson MAVEN version =1.0.0, =7.2.0, =7.2.0, =7.2.0, =7.2.0, =7.2.0, =7.2.0, =7.2.0, =7.2.0, =7.2.0, =1.0, =0.3.8, =0.3.0, =0.2.3, =1.1.0, =1.4.4 and more Source cves: CVE-2023-7272 Source advisory: OSV:GHSA-2RWM-XV5J-777P...

ca.uhn.hapi.fhir:hapi-fhir-cli-api (>=7.2.0, <=7.4.5), ca.uhn.hapi.fhir:hapi-fhir-cli-app (>=7.2.0, <=7.4.5) +409 more potentially affected by CVE-2023-7272 via org.eclipse.parsson:parsson (>=1.0.0, <=1.0.3)

org.eclipse.parsson:parsson MAVEN version =1.0.0, =7.2.0, =7.2.0, =7.2.0, =7.2.0, =7.2.0, =7.2.0, =7.2.0, =7.2.0, =7.2.0, =1.0, =0.3.8, =0.3.0, =0.2.3, =1.1.0, =1.4.4 and more Source cves: CVE-2023-7272 Source advisory: MEND:CVE-2023-7272...

am.ik.home:uaa-client (1.9.0), am.ik.home:uaa-integration-test (1.9.0) +904 more potentially affected by CVE-2024-22262 via org.springframework:spring-web (4.3.7.release)

org.springframework:spring-web MAVEN version 4.3.7.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - am.ik.home:uaa-client 1.9.0 - am.ik.home:uaa-integration-test 1.9.0 - am.ik.home:uaa-server...

ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base (3.0.0), ca.uhn.hapi.fhir:hapi-fhir-testpage-overlay (3.0.0) +863 more potentially affected by CVE-2024-22259 via org.springframework:spring-web (4.3.10.release)

org.springframework:spring-web MAVEN version 4.3.10.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base 3.0.0 -...

ca.uhn.hapi.fhir:hapi-fhir-cli-api (>=4.0.0, <=6.4.1), ca.uhn.hapi.fhir:hapi-fhir-cli-app (>=5.6.5, <=6.4.1) +163 more potentially affected by CVE-2023-28465 via ca.uhn.hapi.fhir:org.hl7.fhir.r5 (>=0.0.1, <=5.6.105)

ca.uhn.hapi.fhir:org.hl7.fhir.r5 MAVEN version =0.0.1, =4.0.0, =5.6.5, =4.1.0, =4.0.3, =4.1.0, =4.0.0, =5.0.0, =4.0.0, =5.3.0, =6.2.0, =5.1.0, =5.3.0, =4.0.0, =4.1.0, =6.4.1 and more Source cves: CVE-2023-28465 Source advisory: MEND:CVE-2023-28465...

ca.uhn.hapi.fhir:hapi-fhir-cli-api (>=5.7.0, <=6.4.1), ca.uhn.hapi.fhir:hapi-fhir-cli-app (>=5.7.7, <=6.4.1) +111 more potentially affected by CVE-2023-28465 via ca.uhn.hapi.fhir:org.hl7.fhir.r4b (>=5.6.22, <=5.6.105)

ca.uhn.hapi.fhir:org.hl7.fhir.r4b MAVEN version =5.6.22, =5.7.0, =5.7.7, =5.7.0, =5.7.0, =5.7.0, =5.7.0, =5.7.0, =6.2.0, =5.7.0, =5.7.0, =5.7.0, =5.7.0, =5.7.7, =5.7.0, =6.4.1 and more Source cves: CVE-2023-28465 Source advisory: MEND:CVE-2023-28465...

ca.uhn.hapi.fhir:hapi-fhir-cli-api (>=5.1.0, <=5.2.1), ca.uhn.hapi.fhir:hapi-fhir-cli-jpaserver (>=5.1.0, <=5.2.1) +59 more potentially affected by CVE-2023-31418 via org.elasticsearch:elasticsearch (6.5.4)

org.elasticsearch:elasticsearch MAVEN version 6.5.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - ca.uhn.hapi.fhir:hapi-fhir-cli-api =5.1.0, =5.1.0, =5.1.0, =5.1.0, =5.1.0, =5.1.0, =5.1.0, =5.1.0...

ca.uhn.hapi.fhir:hapi-fhir-docs (>=6.4.0, <=6.8.8), ca.uhn.hapi.fhir:hapi-fhir-jpaserver-elastic-test-utilities (>=6.4.0, <=6.8.8) +44 more potentially affected by CVE-2023-26119 via net.sourceforge.htmlunit:htmlunit (2.67.0)

net.sourceforge.htmlunit:htmlunit MAVEN version 2.67.0 is affected by a known vulnerability. The following packages have a transitive dependency on net.sourceforge.htmlunit:htmlunit and may be impacted: - ca.uhn.hapi.fhir:hapi-fhir-docs =6.4.0, =6.4.0, =6.4.0, =6.6.0, =6.4.0, =6.4.0, =2022.12.10,...

ca.uhn.hapi.fhir:hapi-fhir-docs (>=5.4.0, <=5.6.5), ca.uhn.hapi.fhir:hapi-fhir-jpaserver-test-utilities (>=5.4.0, <=5.6.5) +32 more potentially affected by CVE-2023-26119 via net.sourceforge.htmlunit:htmlunit (2.49.1)

net.sourceforge.htmlunit:htmlunit MAVEN version 2.49.1 is affected by a known vulnerability. The following packages have a transitive dependency on net.sourceforge.htmlunit:htmlunit and may be impacted: - ca.uhn.hapi.fhir:hapi-fhir-docs =5.4.0, =5.4.0, =5.4.0, =5.4.0, =3.0.0, =0.0.3, =0-snaphot,...

ca.uhn.hapi.fhir:hapi-fhir-docs (>=5.7.0, <=5.7.9), ca.uhn.hapi.fhir:hapi-fhir-jpaserver-test-utilities (>=5.7.0, <=5.7.9) +54 more potentially affected by CVE-2023-26119 via net.sourceforge.htmlunit:htmlunit (2.56.0)

net.sourceforge.htmlunit:htmlunit MAVEN version 2.56.0 is affected by a known vulnerability. The following packages have a transitive dependency on net.sourceforge.htmlunit:htmlunit and may be impacted: - ca.uhn.hapi.fhir:hapi-fhir-docs =5.7.0, =5.7.0, =5.7.7, =5.7.0, =5.7.0, =4.6.19.ayg,...

ca.uhn.hapi.fhir:hapi-fhir-docs (>=6.0.0, <=6.1.3), ca.uhn.hapi.fhir:hapi-fhir-jpaserver-test-utilities (>=6.0.0, <=6.1.3) +44 more potentially affected by CVE-2023-26119 via net.sourceforge.htmlunit:htmlunit (2.58.0)

net.sourceforge.htmlunit:htmlunit MAVEN version 2.58.0 is affected by a known vulnerability. The following packages have a transitive dependency on net.sourceforge.htmlunit:htmlunit and may be impacted: - ca.uhn.hapi.fhir:hapi-fhir-docs =6.0.0, =6.0.0, =6.0.3, =6.0.0, =6.0.0, =6.0.0, =1.0.57,...

ca.uhn.hapi.fhir:hapi-fhir-spring-boot-sample-client-apache (6.6.0), ca.uhn.hapi.fhir:hapi-fhir-spring-boot-sample-client-okhttp (6.6.0) +440 more potentially affected by CVE-2023-34981 via org.apache.tomcat.embed:tomcat-embed-core (9.0.74)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 9.0.74 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - ca.uhn.hapi.fhir:hapi-fhir-spring-boot-sample-client-apache 6.6.0 -...

ca.uhn.hapi.fhir:hapi-fhir-cli-api (3.4.0), ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base (>=3.0.0, <=3.4.0) +1617 more potentially affected by CVE-2023-20863 via org.springframework:spring-expression (4.3.10.release)

org.springframework:spring-expression MAVEN version 4.3.10.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-expression and may be impacted: - ca.uhn.hapi.fhir:hapi-fhir-cli-api 3.4.0 -...

ca.uhn.hapi.fhir:hapi-fhir-cli-api (>=6.0.0, <=6.2.5), ca.uhn.hapi.fhir:hapi-fhir-cli-app (>=6.0.3, <=6.2.5) +822 more potentially affected by CVE-2023-28867 via com.graphql-java:graphql-java (>=1.3, <=17.4)

com.graphql-java:graphql-java MAVEN version =1.3, =6.0.0, =6.0.3, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.2.0, =6.0.0, =6.0.0, =6.0.3, =0.1.0, =1.0.0, =2.8.5, =1.3.0, =1.1.0, =2.27.0 and more Source cves: CVE-2023-28867 Source advisory: OSV:GHSA-P4QX-6W5P-4RJ2...

ca.uhn.hapi.fhir:hapi-fhir-cli-api (>=6.0.0, <=6.2.5), ca.uhn.hapi.fhir:hapi-fhir-cli-app (>=6.0.3, <=6.2.5) +822 more potentially affected by CVE-2023-28867 via com.graphql-java:graphql-java (>=1.3, <=17.4)

com.graphql-java:graphql-java MAVEN version =1.3, =6.0.0, =6.0.3, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.2.0, =6.0.0, =6.0.0, =6.0.3, =0.1.0, =1.0.0, =2.8.5, =1.3.0, =1.1.0, =2.27.0 and more Source cves: CVE-2023-28867 Source advisory: GHSA-P4QX-6W5P-4RJ2...

ca.uhn.hapi.fhir:hapi-fhir-cli-api (>=6.4.0, <=6.4.7), ca.uhn.hapi.fhir:hapi-fhir-cli-app (>=6.4.0, <=6.4.7) +325 more potentially affected by CVE-2023-28867 via com.graphql-java:graphql-java (>=19.0, <=19.3)

com.graphql-java:graphql-java MAVEN version =19.0, =6.4.0, =6.4.0, =6.4.0, =6.4.0, =6.4.0, =6.4.0, =6.4.0, =6.4.0, =6.4.0, =2.0.4, =14.3.0, =17.5.0 - com.datasqrl:sqrl-base 0.6.0 - com.datasqrl:sqrl-calcite 0.6.0 and more Source cves: CVE-2023-28867 Source advisory: GHSA-P4QX-6W5P-4RJ2...

ca.uhn.hapi.fhir:hapi-fhir-cli-api (>=6.4.0, <=6.4.7), ca.uhn.hapi.fhir:hapi-fhir-cli-app (>=6.4.0, <=6.4.7) +325 more potentially affected by CVE-2023-28867 via com.graphql-java:graphql-java (>=19.0, <=19.3)

com.graphql-java:graphql-java MAVEN version =19.0, =6.4.0, =6.4.0, =6.4.0, =6.4.0, =6.4.0, =6.4.0, =6.4.0, =6.4.0, =6.4.0, =2.0.4, =14.3.0, =17.5.0 - com.datasqrl:sqrl-base 0.6.0 - com.datasqrl:sqrl-calcite 0.6.0 and more Source cves: CVE-2023-28867 Source advisory: OSV:GHSA-P4QX-6W5P-4RJ2...

ca.uhn.hapi.fhir:hapi-fhir-cli-api (>=6.0.0, <=6.2.5), ca.uhn.hapi.fhir:hapi-fhir-cli-app (>=6.0.3, <=6.2.5) +822 more potentially affected by CVE-2023-28867 via com.graphql-java:graphql-java (>=1.3, <=17.4)

com.graphql-java:graphql-java MAVEN version =1.3, =6.0.0, =6.0.3, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.2.0, =6.0.0, =6.0.0, =6.0.3, =0.1.0, =1.0.0, =2.8.5, =1.3.0, =1.1.0, =2.27.0 and more Source cves: CVE-2023-28867 Source advisory: MEND:CVE-2023-28867...

ca.uhn.hapi.fhir:hapi-fhir-cli-api (>=6.4.0, <=6.4.7), ca.uhn.hapi.fhir:hapi-fhir-cli-app (>=6.4.0, <=6.4.7) +325 more potentially affected by CVE-2023-28867 via com.graphql-java:graphql-java (>=19.0, <=19.3)

com.graphql-java:graphql-java MAVEN version =19.0, =6.4.0, =6.4.0, =6.4.0, =6.4.0, =6.4.0, =6.4.0, =6.4.0, =6.4.0, =6.4.0, =2.0.4, =14.3.0, =17.5.0 - com.datasqrl:sqrl-base 0.6.0 - com.datasqrl:sqrl-calcite 0.6.0 and more Source cves: CVE-2023-28867 Source advisory: MEND:CVE-2023-28867...