ca.uhn.hapi.fhir:hapi-fhir-cli-api (>=6.0.0, <=6.1.3), ca.uhn.hapi.fhir:hapi-fhir-cli-app (>=6.0.3, <=6.1.3) +245 more potentially affected by CVE-2022-37734 via com.graphql-java:graphql-java (>=17.0-beta1, <=17.3)

com.graphql-java:graphql-java MAVEN version =17.0-beta1, =6.0.0, =6.0.3, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.3, =0.7.0, =0.7.0, =0.0.3, =0.0.3, =0.0.3, =1.6.9, =1.6.20 and more Source cves: CVE-2022-37734 Source advisory: OSV:GHSA-V62J-CXHH-FQ22...

ca.uhn.hapi.fhir:hapi-fhir-cli-api (>=6.0.0, <=6.1.3), ca.uhn.hapi.fhir:hapi-fhir-cli-app (>=6.0.3, <=6.1.3) +832 more potentially affected by CVE-2022-37734 via com.graphql-java:graphql-java (>=0.0.0-2021-06-27t12-22-33-cd2bab76, <=17.3)

com.graphql-java:graphql-java MAVEN version =0.0.0-2021-06-27t12-22-33-cd2bab76, =6.0.0, =6.0.3, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.3, =0.1.0, =1.0.0, =2.8.5, =1.3.0, =1.1.0, =0.6.3-rc1, =2.0.1 and more Source cves: CVE-2022-37734 Source advisory: MEND:CVE-2022-37734...

ca.uhn.hapi.fhir:hapi-fhir-cli-api (>=5.3.0, <=5.7.9), ca.uhn.hapi.fhir:hapi-fhir-cli-app (>=5.6.5, <=5.7.9) +383 more potentially affected by CVE-2021-22145 via org.elasticsearch.client:elasticsearch-rest-client (>=7.10.0, <=7.13.3)

org.elasticsearch.client:elasticsearch-rest-client MAVEN version =7.10.0, =5.3.0, =5.6.5, =5.3.0, =5.3.0, =5.3.0, =5.3.0, =5.3.0, =5.3.0, =5.3.0, =5.3.0, =5.3.0, =5.3.0, =5.3.0, =5.3.0, =5.6.5, =5.7.9 and more Source cves: CVE-2021-22145 Source advisory: GHSA-Q394-H7F5-7F44...

ca.uhn.hapi.fhir:hapi-fhir-cli-api (>=5.3.0, <=5.7.9), ca.uhn.hapi.fhir:hapi-fhir-cli-app (>=5.6.5, <=5.7.9) +383 more potentially affected by CVE-2021-22145 via org.elasticsearch.client:elasticsearch-rest-client (>=7.10.0, <=7.13.3)

org.elasticsearch.client:elasticsearch-rest-client MAVEN version =7.10.0, =5.3.0, =5.6.5, =5.3.0, =5.3.0, =5.3.0, =5.3.0, =5.3.0, =5.3.0, =5.3.0, =5.3.0, =5.3.0, =5.3.0, =5.3.0, =5.3.0, =5.6.5, =5.7.9 and more Source cves: CVE-2021-22145 Source advisory: OSV:GHSA-Q394-H7F5-7F44...

ca.uhn.hapi.fhir:hapi-fhir-cli-api (>=5.1.0, <=5.2.1), ca.uhn.hapi.fhir:hapi-fhir-cli-jpaserver (>=5.1.0, <=5.2.1) +661 more potentially affected by CVE-2021-22137 via org.elasticsearch:elasticsearch (>=6.0.0-alpha1, <=6.8.14)

org.elasticsearch:elasticsearch MAVEN version =6.0.0-alpha1, =5.1.0, =5.1.0, =5.1.0, =5.1.0, =5.1.0, =5.1.0, =5.1.0, =5.1.0, =0.1.0, =4.0.0-beta-1, =1.2.0.release, =1.1.1.release, =1.4.2.release and more Source cves: CVE-2021-22137 Source advisory: OSV:GHSA-HR65-QQ6P-87R4...

ca.uhn.hapi.fhir:hapi-fhir-cli-api (>=5.1.0, <=5.2.1), ca.uhn.hapi.fhir:hapi-fhir-cli-jpaserver (>=5.1.0, <=5.2.1) +661 more potentially affected by CVE-2021-22137 via org.elasticsearch:elasticsearch (>=6.0.0-alpha1, <=6.8.14)

org.elasticsearch:elasticsearch MAVEN version =6.0.0-alpha1, =5.1.0, =5.1.0, =5.1.0, =5.1.0, =5.1.0, =5.1.0, =5.1.0, =5.1.0, =0.1.0, =4.0.0-beta-1, =1.2.0.release, =1.1.1.release, =1.4.2.release and more Source cves: CVE-2021-22137 Source advisory: GHSA-HR65-QQ6P-87R4...

ca.uhn.hapi.fhir:hapi-fhir-android (>=2.1, <=2.5), ca.uhn.hapi.fhir:hapi-fhir-client-okhttp (>=2.0, <=2.5) +411 more potentially affected by CVE-2021-0341 via com.squareup.okhttp3:okhttp (3.4.1)

com.squareup.okhttp3:okhttp MAVEN version 3.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.okhttp3:okhttp and may be impacted: - ca.uhn.hapi.fhir:hapi-fhir-android =2.1, =2.0, =2.0.5, =2.2.0, =2.0.8, =0.0.1, =0.0.4, =0.0.4, =0.0.4,...

ca.uhn.hapi.fhir:hapi-fhir-cli-api (>=5.1.0, <=5.2.1), ca.uhn.hapi.fhir:hapi-fhir-cli-jpaserver (>=5.1.0, <=5.2.1) +650 more potentially affected by CVE-2020-7019 via org.elasticsearch:elasticsearch (>=6.0.0-alpha1, <=6.8.11)

org.elasticsearch:elasticsearch MAVEN version =6.0.0-alpha1, =5.1.0, =5.1.0, =5.1.0, =5.1.0, =5.1.0, =5.1.0, =5.1.0, =5.1.0, =0.1.0, =4.0.0-beta-1, =1.2.0.release, =1.1.1.release, =1.4.2.release and more Source cves: CVE-2020-7019 Source advisory: GHSA-C77J-P484-H84M...

ca.uhn.hapi.fhir:hapi-fhir-cli-api (>=5.1.0, <=5.2.1), ca.uhn.hapi.fhir:hapi-fhir-cli-jpaserver (>=5.1.0, <=5.2.1) +650 more potentially affected by CVE-2020-7019 via org.elasticsearch:elasticsearch (>=6.0.0-alpha1, <=6.8.11)

org.elasticsearch:elasticsearch MAVEN version =6.0.0-alpha1, =5.1.0, =5.1.0, =5.1.0, =5.1.0, =5.1.0, =5.1.0, =5.1.0, =5.1.0, =0.1.0, =4.0.0-beta-1, =1.2.0.release, =1.1.1.release, =1.4.2.release and more Source cves: CVE-2020-7019 Source advisory: OSV:GHSA-C77J-P484-H84M...

ca.uhn.hapi.fhir:hapi-fhir-cli-api (5.1.0), ca.uhn.hapi.fhir:hapi-fhir-cli-jpaserver (5.1.0) +152 more potentially affected by CVE-2020-5411 via org.springframework.batch:spring-batch-core (>=4.0.0.release, <=4.2.2.release)

org.springframework.batch:spring-batch-core MAVEN version =4.0.0.release, =3.0.0.release, =3.0.0.release, =4.2.0, =4.2.0, =3.0.0-alpha.1, =2020.08.001 and more Source cves: CVE-2020-5411 Source advisory: OSV:GHSA-4PH4-Q9R5-6WM6...

ca.uhn.hapi.fhir:hapi-fhir-cli-api (5.1.0), ca.uhn.hapi.fhir:hapi-fhir-cli-jpaserver (5.1.0) +152 more potentially affected by CVE-2020-5411 via org.springframework.batch:spring-batch-core (>=4.0.0.release, <=4.2.2.release)

org.springframework.batch:spring-batch-core MAVEN version =4.0.0.release, =3.0.0.release, =3.0.0.release, =4.2.0, =4.2.0, =3.0.0-alpha.1, =2020.08.001 and more Source cves: CVE-2020-5411 Source advisory: GHSA-4PH4-Q9R5-6WM6...

ca.uhn.hapi.fhir:hapi-fhir-cli-api (>=5.2.0, <=5.2.1), ca.uhn.hapi.fhir:hapi-fhir-cli-jpaserver (>=5.2.0, <=5.2.1) +2368 more potentially affected by CVE-2016-1000027 via org.springframework:spring-web (5.2.9.release)

org.springframework:spring-web MAVEN version 5.2.9.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - ca.uhn.hapi.fhir:hapi-fhir-cli-api =5.2.0, =5.2.0, =5.2.0, =5.2.0, =5.2.0, =5.2.0, =5.2.0,...

ca.uhn.hapi.fhir:hapi-fhir-cli-api (3.4.0), ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base (>=3.3.0, <=3.4.0) +131 more potentially affected by CVE-2016-1000027 via org.springframework:spring-web (5.0.3.release)

org.springframework:spring-web MAVEN version 5.0.3.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - ca.uhn.hapi.fhir:hapi-fhir-cli-api 3.4.0 - ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base =3.3.0...

ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base (1.6), ca.uhn.hapi.fhir:hapi-fhir-testpage-overlay (1.6) +79 more potentially affected by CVE-2016-1000027 via org.springframework:spring-web (4.3.0.release)

org.springframework:spring-web MAVEN version 4.3.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base 1.6 - ca.uhn.hapi.fhir:hapi-fhir-testpage-overlay...

ca.uhn.hapi.fhir:hapi-fhir-cli-api (>=5.1.0, <=5.2.1), ca.uhn.hapi.fhir:hapi-fhir-cli-jpaserver (>=5.1.0, <=5.2.1) +548 more potentially affected by CVE-2019-7614 via org.elasticsearch:elasticsearch (>=6.0.0-alpha1, <=6.8.1)

org.elasticsearch:elasticsearch MAVEN version =6.0.0-alpha1, =5.1.0, =5.1.0, =5.1.0, =5.1.0, =5.1.0, =5.1.0, =5.1.0, =5.1.0, =0.1.0, =4.0.0-beta-1, =1.2.0.release, =1.1.1.release, =1.4.2.release - cn.patterncat:spring-boot-starter-elasticsearch 0.0.1 - cn.xphsc:elasticsearch-rest-plus 1.0.2 and...

ca.uhn.hapi.fhir:hapi-fhir-cli-api (>=5.1.0, <=5.2.1), ca.uhn.hapi.fhir:hapi-fhir-cli-jpaserver (>=5.1.0, <=5.2.1) +484 more potentially affected by CVE-2019-7611 via org.elasticsearch:elasticsearch (>=6.0.0, <=6.6.0)

org.elasticsearch:elasticsearch MAVEN version =6.0.0, =5.1.0, =5.1.0, =5.1.0, =5.1.0, =5.1.0, =5.1.0, =5.1.0, =5.1.0, =0.1.0, =4.0.0-beta-1, =1.2.0.release, =1.1.1.release, =1.4.2.release - cn.patterncat:spring-boot-starter-elasticsearch 0.0.1 - cn.xphsc:elasticsearch-rest-plus 1.0.2 and more...

ca.uhn.hapi.fhir:hapi-fhir-cli-api (>=5.1.0, <=5.2.1), ca.uhn.hapi.fhir:hapi-fhir-cli-jpaserver (>=5.1.0, <=5.2.1) +484 more potentially affected by CVE-2019-7611 via org.elasticsearch:elasticsearch (>=6.0.0, <=6.6.0)

org.elasticsearch:elasticsearch MAVEN version =6.0.0, =5.1.0, =5.1.0, =5.1.0, =5.1.0, =5.1.0, =5.1.0, =5.1.0, =5.1.0, =0.1.0, =4.0.0-beta-1, =1.2.0.release, =1.1.1.release, =1.4.2.release - cn.patterncat:spring-boot-starter-elasticsearch 0.0.1 - cn.xphsc:elasticsearch-rest-plus 1.0.2 and more...

ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base (1.4), ca.uhn.hapi.fhir:hapi-fhir-testpage-overlay (1.4) +134 more potentially affected by CVE-2022-22971 via org.springframework:spring-messaging (4.2.4.release)

org.springframework:spring-messaging MAVEN version 4.2.4.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-messaging and may be impacted: - ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base 1.4 -...

br.jus.stf.digital:core (>=2.0.0, <=2.3.1), ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base (>=2.4, <=2.5) +325 more potentially affected by CVE-2022-22971 via org.springframework:spring-messaging (4.3.7.release)

org.springframework:spring-messaging MAVEN version 4.3.7.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-messaging and may be impacted: - br.jus.stf.digital:core =2.0.0, =2.4, =1.1.0, =1.1.0, =1.0.1-release,...

ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base (1.6), ca.uhn.hapi.fhir:hapi-fhir-testpage-overlay (1.6) +168 more potentially affected by CVE-2022-22970 via org.springframework:spring-beans (4.3.0.release)

org.springframework:spring-beans MAVEN version 4.3.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-beans and may be impacted: - ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base 1.6 -...