ca.uhn.hapi.fhir:org.hl7.fhir.convertors (5.6.2), ca.uhn.hapi.fhir:org.hl7.fhir.validation (5.6.2) potentially affected by CVE-2026-81876 via ca.uhn.hapi.fhir:org.hl7.fhir.r5 (5.6.2)

ca.uhn.hapi.fhir:org.hl7.fhir.r5 MAVEN version 5.6.2 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:org.hl7.fhir.r5 and may be impacted: - ca.uhn.hapi.fhir:org.hl7.fhir.convertors 5.6.2 - ca.uhn.hapi.fhir:org.hl7.fhir.validation 5.6.2...

ca.uhn.hapi.fhir:org.hl7.fhir.convertors (5.6.32), ca.uhn.hapi.fhir:org.hl7.fhir.validation (5.6.32) potentially affected by CVE-2026-81876 via ca.uhn.hapi.fhir:org.hl7.fhir.r5 (5.6.32)

ca.uhn.hapi.fhir:org.hl7.fhir.r5 MAVEN version 5.6.32 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:org.hl7.fhir.r5 and may be impacted: - ca.uhn.hapi.fhir:org.hl7.fhir.convertors 5.6.32 - ca.uhn.hapi.fhir:org.hl7.fhir.validation...

ca.uhn.hapi.fhir:org.hl7.fhir.convertors (5.6.51), ca.uhn.hapi.fhir:org.hl7.fhir.validation (5.6.51) potentially affected by CVE-2026-81876 via ca.uhn.hapi.fhir:org.hl7.fhir.r5 (5.6.51)

ca.uhn.hapi.fhir:org.hl7.fhir.r5 MAVEN version 5.6.51 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:org.hl7.fhir.r5 and may be impacted: - ca.uhn.hapi.fhir:org.hl7.fhir.convertors 5.6.51 - ca.uhn.hapi.fhir:org.hl7.fhir.validation...

ca.uhn.hapi.fhir:org.hl7.fhir.convertors (5.6.28), ca.uhn.hapi.fhir:org.hl7.fhir.validation (5.6.28) potentially affected by CVE-2026-81876 via ca.uhn.hapi.fhir:org.hl7.fhir.r5 (5.6.28)

ca.uhn.hapi.fhir:org.hl7.fhir.r5 MAVEN version 5.6.28 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:org.hl7.fhir.r5 and may be impacted: - ca.uhn.hapi.fhir:org.hl7.fhir.convertors 5.6.28 - ca.uhn.hapi.fhir:org.hl7.fhir.validation...

ca.uhn.hapi.fhir:org.hl7.fhir.convertors (5.6.81), ca.uhn.hapi.fhir:org.hl7.fhir.validation (5.6.81) potentially affected by CVE-2026-81876 via ca.uhn.hapi.fhir:org.hl7.fhir.r5 (5.6.81)

ca.uhn.hapi.fhir:org.hl7.fhir.r5 MAVEN version 5.6.81 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:org.hl7.fhir.r5 and may be impacted: - ca.uhn.hapi.fhir:org.hl7.fhir.convertors 5.6.81 - ca.uhn.hapi.fhir:org.hl7.fhir.validation...

ca.uhn.hapi.fhir:org.hl7.fhir.convertors (5.6.43), ca.uhn.hapi.fhir:org.hl7.fhir.validation (5.6.43) potentially affected by CVE-2026-81876 via ca.uhn.hapi.fhir:org.hl7.fhir.r5 (5.6.43)

ca.uhn.hapi.fhir:org.hl7.fhir.r5 MAVEN version 5.6.43 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:org.hl7.fhir.r5 and may be impacted: - ca.uhn.hapi.fhir:org.hl7.fhir.convertors 5.6.43 - ca.uhn.hapi.fhir:org.hl7.fhir.validation...

ca.uhn.hapi.fhir:org.hl7.fhir.convertors (5.6.15), ca.uhn.hapi.fhir:org.hl7.fhir.validation (5.6.15) +6 more potentially affected by CVE-2026-81876 via ca.uhn.hapi.fhir:org.hl7.fhir.r5 (5.6.15)

ca.uhn.hapi.fhir:org.hl7.fhir.r5 MAVEN version 5.6.15 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:org.hl7.fhir.r5 and may be impacted: - ca.uhn.hapi.fhir:org.hl7.fhir.convertors 5.6.15 - ca.uhn.hapi.fhir:org.hl7.fhir.validation...

ca.uhn.hapi.fhir:org.hl7.fhir.convertors (0.0.14), ca.uhn.hapi.fhir:org.hl7.fhir.validation (0.0.14) potentially affected by CVE-2026-81876 via ca.uhn.hapi.fhir:org.hl7.fhir.r5 (0.0.14)

ca.uhn.hapi.fhir:org.hl7.fhir.r5 MAVEN version 0.0.14 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:org.hl7.fhir.r5 and may be impacted: - ca.uhn.hapi.fhir:org.hl7.fhir.convertors 0.0.14 - ca.uhn.hapi.fhir:org.hl7.fhir.validation...

ca.uhn.hapi.fhir:org.hl7.fhir.convertors (5.1.8), ca.uhn.hapi.fhir:org.hl7.fhir.validation (5.1.8) +3 more potentially affected by CVE-2026-81876 via ca.uhn.hapi.fhir:org.hl7.fhir.r5 (5.1.8)

ca.uhn.hapi.fhir:org.hl7.fhir.r5 MAVEN version 5.1.8 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:org.hl7.fhir.r5 and may be impacted: - ca.uhn.hapi.fhir:org.hl7.fhir.convertors 5.1.8 - ca.uhn.hapi.fhir:org.hl7.fhir.validation 5.1.8...

ca.uhn.hapi.fhir:org.hl7.fhir.convertors (5.3.10), ca.uhn.hapi.fhir:org.hl7.fhir.validation (5.3.10) potentially affected by CVE-2026-81876 via ca.uhn.hapi.fhir:org.hl7.fhir.r5 (5.3.10)

ca.uhn.hapi.fhir:org.hl7.fhir.r5 MAVEN version 5.3.10 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:org.hl7.fhir.r5 and may be impacted: - ca.uhn.hapi.fhir:org.hl7.fhir.convertors 5.3.10 - ca.uhn.hapi.fhir:org.hl7.fhir.validation...

ca.uhn.hapi.fhir:org.hl7.fhir.convertors (5.6.101), ca.uhn.hapi.fhir:org.hl7.fhir.validation (5.6.101) +3 more potentially affected by CVE-2026-81876 via ca.uhn.hapi.fhir:org.hl7.fhir.r5 (5.6.101)

ca.uhn.hapi.fhir:org.hl7.fhir.r5 MAVEN version 5.6.101 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:org.hl7.fhir.r5 and may be impacted: - ca.uhn.hapi.fhir:org.hl7.fhir.convertors 5.6.101 - ca.uhn.hapi.fhir:org.hl7.fhir.validation...

ca.uhn.hapi.fhir:org.hl7.fhir.convertors (5.6.56), ca.uhn.hapi.fhir:org.hl7.fhir.validation (5.6.56) potentially affected by CVE-2026-81876 via ca.uhn.hapi.fhir:org.hl7.fhir.r5 (5.6.56)

ca.uhn.hapi.fhir:org.hl7.fhir.r5 MAVEN version 5.6.56 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:org.hl7.fhir.r5 and may be impacted: - ca.uhn.hapi.fhir:org.hl7.fhir.convertors 5.6.56 - ca.uhn.hapi.fhir:org.hl7.fhir.validation...

ca.uhn.hapi.fhir:org.hl7.fhir.convertors (5.6.34), ca.uhn.hapi.fhir:org.hl7.fhir.validation (5.6.34) potentially affected by CVE-2026-81876 via ca.uhn.hapi.fhir:org.hl7.fhir.r5 (5.6.34)

ca.uhn.hapi.fhir:org.hl7.fhir.r5 MAVEN version 5.6.34 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:org.hl7.fhir.r5 and may be impacted: - ca.uhn.hapi.fhir:org.hl7.fhir.convertors 5.6.34 - ca.uhn.hapi.fhir:org.hl7.fhir.validation...

ca.uhn.hapi.fhir:org.hl7.fhir.convertors (5.5.13), ca.uhn.hapi.fhir:org.hl7.fhir.validation (5.5.13) potentially affected by CVE-2026-81876 via ca.uhn.hapi.fhir:org.hl7.fhir.r5 (5.5.13)

ca.uhn.hapi.fhir:org.hl7.fhir.r5 MAVEN version 5.5.13 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:org.hl7.fhir.r5 and may be impacted: - ca.uhn.hapi.fhir:org.hl7.fhir.convertors 5.5.13 - ca.uhn.hapi.fhir:org.hl7.fhir.validation...

ca.uhn.hapi.fhir:hapi-fhir-cli-api (>=5.6.0, <=5.6.5), ca.uhn.hapi.fhir:hapi-fhir-cli-app (5.6.5) +48 more potentially affected by CVE-2026-81876 via ca.uhn.hapi.fhir:org.hl7.fhir.r5 (5.5.7)

ca.uhn.hapi.fhir:org.hl7.fhir.r5 MAVEN version 5.5.7 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:org.hl7.fhir.r5 and may be impacted: - ca.uhn.hapi.fhir:hapi-fhir-cli-api =5.6.0, =5.6.0, =5.6.0, =5.6.0, =5.6.0, =5.6.0, =5.6.0,...

EUVD-2026-80998

HAPI FHIR: SHCParser DEFLATE infinite loop causes denial of service...

ca.uhn.hapi.fhir:hapi-fhir-cli-api (4.0.3), ca.uhn.hapi.fhir:hapi-fhir-igpacks (4.0.3) +6 more potentially affected by CVE-2026-81876 via ca.uhn.hapi.fhir:org.hl7.fhir.validation (4.0.3)

ca.uhn.hapi.fhir:org.hl7.fhir.validation MAVEN version 4.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:org.hl7.fhir.validation and may be impacted: - ca.uhn.hapi.fhir:hapi-fhir-cli-api 4.0.3 - ca.uhn.hapi.fhir:hapi-fhir-igpacks...

ca.uhn.hapi.fhir:hapi-fhir-cli-api (>=5.4.0, <=5.4.2), ca.uhn.hapi.fhir:hapi-fhir-cli-jpaserver (>=5.4.0, <=5.4.2) +41 more potentially affected by CVE-2026-81876 via ca.uhn.hapi.fhir:org.hl7.fhir.validation (5.4.0)

ca.uhn.hapi.fhir:org.hl7.fhir.validation MAVEN version 5.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:org.hl7.fhir.validation and may be impacted: - ca.uhn.hapi.fhir:hapi-fhir-cli-api =5.4.0, =5.4.0, =5.4.0, =5.4.0, =5.4.0,...

HAPI FHIR: SHCParser unbounded DEFLATE decompression causes denial of service

Summary SHCParser inflates compressed Smart Health Card JWT payloads into memory without a decompressed-size limit. An attacker who can submit SHC content for validation can craft a small compressed JWT payload that expands to a very large byte array, causing memory exhaustion or severe garbage...

ca.uhn.hapi.fhir:hapi-fhir-cli-api (>=6.4.2, <=6.4.7), ca.uhn.hapi.fhir:hapi-fhir-cli-app (>=6.4.2, <=6.4.7) +58 more potentially affected by CVE-2026-81875 via ca.uhn.hapi.fhir:org.hl7.fhir.validation (5.6.971)

ca.uhn.hapi.fhir:org.hl7.fhir.validation MAVEN version 5.6.971 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:org.hl7.fhir.validation and may be impacted: - ca.uhn.hapi.fhir:hapi-fhir-cli-api =6.4.2, =6.4.2, =6.4.2, =6.4.2, =6.4.2,...