ai.preferred:venom (>=4.1.3, <=4.2.7), at.ganzleicht.vaadin:vaadin-client-compiler (9.1.3) +1071 more potentially affected by CVE-2022-29546 via net.sourceforge.htmlunit:neko-htmlunit (>=2.21, <=2.60.0)

net.sourceforge.htmlunit:neko-htmlunit MAVEN version =2.21, =4.1.3, =1.0.0, =1.0.0, =1.0.0, =1, =2.0, =0.9.6, =0.9.6, =0.0.10, =0.14, =5.4.0, =5.4.0, =6.1.3 and more Source cves: CVE-2022-29546 Source advisory: MEND:CVE-2022-29546...

ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base (>=2.0, <=2.2), ca.uhn.hapi.fhir:hapi-fhir-testpage-overlay (>=2.0, <=2.2) +364 more potentially affected by CVE-2022-22968 via org.springframework:spring-context (4.3.1.release)

org.springframework:spring-context MAVEN version 4.3.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-context and may be impacted: - ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base =2.0, =2.0, =2.0, =2.1.0-release,...

ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base (>=2.0, <=2.2), ca.uhn.hapi.fhir:hapi-fhir-testpage-overlay (>=2.0, <=2.2) +348 more potentially affected by CVE-2022-22950 via org.springframework:spring-expression (4.3.1.release)

org.springframework:spring-expression MAVEN version 4.3.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-expression and may be impacted: - ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base =2.0, =2.0, =2.0, =2.1.0-release,...

ca.uhn.hapi.fhir.karaf:hapi-fhir (>=3.3.0, <=3.7.0), com.esri.geoevent.sdk:geoevent-sdk (>=10.6.0, <=10.9.0) +201 more potentially affected by unknown CVE via org.ops4j.pax.logging:pax-logging-log4j2 (>=1.8.2, <=1.11.9)

org.ops4j.pax.logging:pax-logging-log4j2 MAVEN version =1.8.2, =3.3.0, =10.6.0, =2.2.0, =2.2.0, =2.2.0, =2.2.0, =0.2.0, =7.3.0, =7.3.0, =7.2.0, =7.2.0, =7.2.0, =7.2.0, =7.2.0, =7.7.0 and more Source cves: unknown CVE Source advisory: OSV:GHSA-XXFH-X98P-J8FR...

ca.uhn.hapi.fhir:hapi-fhir-cli-api (>=5.1.0, <=5.2.1), ca.uhn.hapi.fhir:hapi-fhir-cli-jpaserver (>=5.1.0, <=5.2.1) +664 more potentially affected by CVE-2021-22144 via org.elasticsearch:elasticsearch (>=6.0.0-alpha1, <=6.8.16)

org.elasticsearch:elasticsearch MAVEN version =6.0.0-alpha1, =5.1.0, =5.1.0, =5.1.0, =5.1.0, =5.1.0, =5.1.0, =5.1.0, =5.1.0, =0.1.0, =4.0.0-beta-1, =1.2.0.release, =1.1.1.release, =1.4.2.release and more Source cves: CVE-2021-22144 Source advisory: OSV:GHSA-3393-HVRJ-W7V3...

ca.uhn.hapi.fhir:hapi-fhir-cli-api (>=5.3.0, <=5.7.9), ca.uhn.hapi.fhir:hapi-fhir-cli-app (>=5.6.5, <=5.7.9) +383 more potentially affected by CVE-2021-22145 via org.elasticsearch.client:elasticsearch-rest-client (>=7.10.0, <=7.13.3)

org.elasticsearch.client:elasticsearch-rest-client MAVEN version =7.10.0, =5.3.0, =5.6.5, =5.3.0, =5.3.0, =5.3.0, =5.3.0, =5.3.0, =5.3.0, =5.3.0, =5.3.0, =5.3.0, =5.3.0, =5.3.0, =5.3.0, =5.6.5, =5.7.9 and more Source cves: CVE-2021-22145 Source advisory: MEND:CVE-2021-22145...

ca.uhn.hapi.fhir:hapi-fhir-cli-api (>=5.1.0, <=5.2.1), ca.uhn.hapi.fhir:hapi-fhir-cli-jpaserver (>=5.1.0, <=5.2.1) +661 more potentially affected by CVE-2021-22135 via org.elasticsearch:elasticsearch (>=6.0.0-alpha1, <=6.8.14)

org.elasticsearch:elasticsearch MAVEN version =6.0.0-alpha1, =5.1.0, =5.1.0, =5.1.0, =5.1.0, =5.1.0, =5.1.0, =5.1.0, =5.1.0, =0.1.0, =4.0.0-beta-1, =1.2.0.release, =1.1.1.release, =1.4.2.release and more Source cves: CVE-2021-22135 Source advisory: OSV:GHSA-62WW-4P3P-7FHJ...

ca.uhn.hapi.fhir:hapi-fhir-testpage-overlay (0.9) potentially affected by CVE-2021-32053 via ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base (0.9)

ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base MAVEN version 0.9 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base and may be impacted: - ca.uhn.hapi.fhir:hapi-fhir-testpage-overlay 0.9 Source cves: CVE-2021-32053...

ca.uhn.hapi.fhir:hapi-fhir-cli-api (4.0.0), ca.uhn.hapi.fhir:hapi-fhir-igpacks (4.0.0) +2 more potentially affected by CVE-2021-32053 via ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base (4.0.0)

ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base MAVEN version 4.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base and may be impacted: - ca.uhn.hapi.fhir:hapi-fhir-cli-api 4.0.0 - ca.uhn.hapi.fhir:hapi-fhir-igpacks...

GHSA-67F6-C8MX-4Q2M Uncontrolled Resource Consumption in JPA Server in HAPI FHIR

JPA Server in HAPI FHIR before 5.4.0 allows a user to deny service e.g., disable access to the database after the attack stops via history requests. This occurs because of a SELECT COUNT statement that requires a full index scan, with an accompanying large amount of server resources if there are...

ca.uhn.hapi.fhir:hapi-fhir-cli-api (>=5.0.0, <=5.3.3), ca.uhn.hapi.fhir:hapi-fhir-cli-jpaserver (>=5.0.0, <=5.3.3) +15 more potentially affected by CVE-2021-32053 via ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base (>=5.0.0, <=5.3.3)

ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base MAVEN version =5.0.0, =5.0.0, =5.0.0, =5.3.0, =5.0.0, =5.3.0, =5.1.0, =5.3.0, =5.0.0, =5.2.0, =5.1.0, =5.3.3 - org.opencds.cqf:common 0.4.0 - org.opencds.cqf:cqf-ruler-dstu3 0.4.0 - org.opencds.cqf:cqf-ruler-r4 0.4.0 - org.opencds.cqf:dstu3 0.4.0 -...

Uncontrolled Resource Consumption in JPA Server in HAPI FHIR

JPA Server in HAPI FHIR before 5.4.0 allows a user to deny service e.g., disable access to the database after the attack stops via history requests. This occurs because of a SELECT COUNT statement that requires a full index scan, with an accompanying large amount of server resources if there are...

ca.uhn.hapi.fhir:hapi-fhir-cli-api (3.7.0), ca.uhn.hapi.fhir:hapi-fhir-igpacks (3.7.0) +1 more potentially affected by CVE-2021-32053 via ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base (3.7.0)

ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base MAVEN version 3.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base and may be impacted: - ca.uhn.hapi.fhir:hapi-fhir-cli-api 3.7.0 - ca.uhn.hapi.fhir:hapi-fhir-igpacks...

org.hspconsortium.reference:hspc-reference-api (>=1.9.0, <=1.10.3), org.hspconsortium.reference:hspc-reference-api-mysql (>=1.9.0, <=1.10.3) +3 more potentially affected by CVE-2021-32053 via ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base (3.0.0)

ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base MAVEN version 3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base and may be impacted: - org.hspconsortium.reference:hspc-reference-api =1.9.0, =1.9.0, =1.9.0, =1.9.0...

ca.uhn.hapi.fhir:hapi-fhir-cli-api (4.2.0), ca.uhn.hapi.fhir:hapi-fhir-cli-jpaserver (4.2.0) +4 more potentially affected by CVE-2021-32053 via ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base (4.2.0)

ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base MAVEN version 4.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base and may be impacted: - ca.uhn.hapi.fhir:hapi-fhir-cli-api 4.2.0 -...

org.hspconsortium.reference:hspc-reference-api (>=1.5.0, <=1.8.0), org.hspconsortium.reference:hspc-reference-api-mysql (>=1.5.0, <=1.8.0) +3 more potentially affected by CVE-2021-32053 via ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base (2.4)

ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base MAVEN version 2.4 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base and may be impacted: - org.hspconsortium.reference:hspc-reference-api =1.5.0, =1.5.0, =1.5.0, =1.5.0,...

org.hspconsortium:hsp-api-webapp (0.8), org.hspconsortium:hsp-client-profile-extension-example (0.8) +1 more potentially affected by CVE-2021-32053 via ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base (1.1)

ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base MAVEN version 1.1 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base and may be impacted: - org.hspconsortium:hsp-api-webapp 0.8 -...

ca.uhn.hapi.fhir:hapi-fhir-testpage-overlay (1.6) potentially affected by CVE-2021-32053 via ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base (1.6)

ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base MAVEN version 1.6 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base and may be impacted: - ca.uhn.hapi.fhir:hapi-fhir-testpage-overlay 1.6 Source cves: CVE-2021-32053...

ca.uhn.hapi.fhir:hapi-fhir-testpage-overlay (1.0) potentially affected by CVE-2021-32053 via ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base (1.0)

ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base MAVEN version 1.0 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base and may be impacted: - ca.uhn.hapi.fhir:hapi-fhir-testpage-overlay 1.0 Source cves: CVE-2021-32053...

gov.hhs.cms.bluebutton.fhir:bbonfhir-server-app (>=0.1.0-cbbf-1-additional-config-changes-1, <=0.1.0-54), gov.hhs.cms.bluebutton.fhir:bluebutton-server-app (>=0.1.0-cbbf-40-cleanup-and-refactor-round-2-1, <=1.0.0-7) potentially affected by CVE-2021-32053 via ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base (2.0)

ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base MAVEN version 2.0 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base and may be impacted: - gov.hhs.cms.bluebutton.fhir:bbonfhir-server-app...