ca.uhn.hapi.fhir:org.hl7.fhir.convertors (5.6.72), ca.uhn.hapi.fhir:org.hl7.fhir.validation (5.6.72) +3 more potentially affected by CVE-2026-33180 via ca.uhn.hapi.fhir:org.hl7.fhir.dstu2 (5.6.72)

ca.uhn.hapi.fhir:org.hl7.fhir.dstu2 MAVEN version 5.6.72 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:org.hl7.fhir.dstu2 and may be impacted: - ca.uhn.hapi.fhir:org.hl7.fhir.convertors 5.6.72 - ca.uhn.hapi.fhir:org.hl7.fhir.validati...

ca.uhn.hapi.fhir:org.hl7.fhir.convertors (5.4.5), ca.uhn.hapi.fhir:org.hl7.fhir.validation (5.4.5) potentially affected by CVE-2026-33180 via ca.uhn.hapi.fhir:org.hl7.fhir.r5 (5.4.5)

ca.uhn.hapi.fhir:org.hl7.fhir.r5 MAVEN version 5.4.5 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:org.hl7.fhir.r5 and may be impacted: - ca.uhn.hapi.fhir:org.hl7.fhir.convertors 5.4.5 - ca.uhn.hapi.fhir:org.hl7.fhir.validation 5.4.5...

ca.uhn.hapi.fhir:org.hl7.fhir.convertors (5.3.8), ca.uhn.hapi.fhir:org.hl7.fhir.validation (5.3.8) potentially affected by CVE-2026-33180 via ca.uhn.hapi.fhir:org.hl7.fhir.dstu2 (5.3.8)

ca.uhn.hapi.fhir:org.hl7.fhir.dstu2 MAVEN version 5.3.8 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:org.hl7.fhir.dstu2 and may be impacted: - ca.uhn.hapi.fhir:org.hl7.fhir.convertors 5.3.8 - ca.uhn.hapi.fhir:org.hl7.fhir.validation...

HAPI FHIR HTTP authentication leak in redirects

Impact When setting headers in HTTP requests, the internal HTTP client sends headers first to the host in the initial URL but also, if asked to follow redirects and a 30X HTTP response code is returned, to the host mentioned in URL in the Location: response header value. Sending the same set of...

GHSA-P7M9-V2CM-2H7M HAPI FHIR HTTP authentication leak in redirects

Impact When setting headers in HTTP requests, the internal HTTP client sends headers first to the host in the initial URL but also, if asked to follow redirects and a 30X HTTP response code is returned, to the host mentioned in URL in the Location: response header value. Sending the same set of...

ca.uhn.hapi.fhir:org.hl7.fhir.convertors (5.5.8), ca.uhn.hapi.fhir:org.hl7.fhir.validation (5.5.8) potentially affected by CVE-2026-33180 via ca.uhn.hapi.fhir:org.hl7.fhir.dstu3 (5.5.8)

ca.uhn.hapi.fhir:org.hl7.fhir.dstu3 MAVEN version 5.5.8 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:org.hl7.fhir.dstu3 and may be impacted: - ca.uhn.hapi.fhir:org.hl7.fhir.convertors 5.5.8 - ca.uhn.hapi.fhir:org.hl7.fhir.validation...

ca.uhn.hapi.fhir:org.hl7.fhir.convertors (5.3.4), ca.uhn.hapi.fhir:org.hl7.fhir.validation (5.3.4) potentially affected by CVE-2026-33180 via ca.uhn.hapi.fhir:org.hl7.fhir.r4 (5.3.4)

ca.uhn.hapi.fhir:org.hl7.fhir.r4 MAVEN version 5.3.4 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:org.hl7.fhir.r4 and may be impacted: - ca.uhn.hapi.fhir:org.hl7.fhir.convertors 5.3.4 - ca.uhn.hapi.fhir:org.hl7.fhir.validation 5.3.4...

ca.uhn.hapi.fhir:org.hl7.fhir.convertors (5.0.7), ca.uhn.hapi.fhir:org.hl7.fhir.validation (5.0.7) potentially affected by CVE-2026-33180 via ca.uhn.hapi.fhir:org.hl7.fhir.r5 (5.0.7)

ca.uhn.hapi.fhir:org.hl7.fhir.r5 MAVEN version 5.0.7 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:org.hl7.fhir.r5 and may be impacted: - ca.uhn.hapi.fhir:org.hl7.fhir.convertors 5.0.7 - ca.uhn.hapi.fhir:org.hl7.fhir.validation 5.0.7...

ca.uhn.hapi.fhir:org.hl7.fhir.convertors (0.0.2), ca.uhn.hapi.fhir:org.hl7.fhir.validation (0.0.2) potentially affected by CVE-2026-33180 via ca.uhn.hapi.fhir:org.hl7.fhir.dstu2016may (0.0.2)

ca.uhn.hapi.fhir:org.hl7.fhir.dstu2016may MAVEN version 0.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:org.hl7.fhir.dstu2016may and may be impacted: - ca.uhn.hapi.fhir:org.hl7.fhir.convertors 0.0.2 -...

ca.uhn.hapi.fhir:org.hl7.fhir.convertors (5.2.16), ca.uhn.hapi.fhir:org.hl7.fhir.validation (5.2.16) potentially affected by CVE-2026-33180 via ca.uhn.hapi.fhir:org.hl7.fhir.dstu3 (5.2.16)

ca.uhn.hapi.fhir:org.hl7.fhir.dstu3 MAVEN version 5.2.16 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:org.hl7.fhir.dstu3 and may be impacted: - ca.uhn.hapi.fhir:org.hl7.fhir.convertors 5.2.16 - ca.uhn.hapi.fhir:org.hl7.fhir.validati...

ca.uhn.hapi.fhir:org.hl7.fhir.convertors (5.6.34), ca.uhn.hapi.fhir:org.hl7.fhir.validation (5.6.34) potentially affected by CVE-2026-33180 via ca.uhn.hapi.fhir:org.hl7.fhir.dstu2016may (5.6.34)

ca.uhn.hapi.fhir:org.hl7.fhir.dstu2016may MAVEN version 5.6.34 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:org.hl7.fhir.dstu2016may and may be impacted: - ca.uhn.hapi.fhir:org.hl7.fhir.convertors 5.6.34 -...

ca.uhn.hapi.fhir:org.hl7.fhir.convertors (5.5.2), ca.uhn.hapi.fhir:org.hl7.fhir.validation (5.5.2) potentially affected by CVE-2026-33180 via ca.uhn.hapi.fhir:org.hl7.fhir.dstu2016may (5.5.2)

ca.uhn.hapi.fhir:org.hl7.fhir.dstu2016may MAVEN version 5.5.2 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:org.hl7.fhir.dstu2016may and may be impacted: - ca.uhn.hapi.fhir:org.hl7.fhir.convertors 5.5.2 -...

ca.uhn.hapi.fhir:org.hl7.fhir.convertors (5.6.53), ca.uhn.hapi.fhir:org.hl7.fhir.dstu2 (5.6.53) +9 more potentially affected by CVE-2026-33180 via ca.uhn.hapi.fhir:org.hl7.fhir.utilities (5.6.53)

ca.uhn.hapi.fhir:org.hl7.fhir.utilities MAVEN version 5.6.53 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:org.hl7.fhir.utilities and may be impacted: - ca.uhn.hapi.fhir:org.hl7.fhir.convertors 5.6.53 -...

ca.uhn.hapi.fhir:org.hl7.fhir.convertors (5.6.35), ca.uhn.hapi.fhir:org.hl7.fhir.validation (5.6.35) potentially affected by CVE-2026-33180 via ca.uhn.hapi.fhir:org.hl7.fhir.dstu2 (5.6.35)

ca.uhn.hapi.fhir:org.hl7.fhir.dstu2 MAVEN version 5.6.35 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:org.hl7.fhir.dstu2 and may be impacted: - ca.uhn.hapi.fhir:org.hl7.fhir.convertors 5.6.35 - ca.uhn.hapi.fhir:org.hl7.fhir.validati...

ca.uhn.hapi.fhir:org.hl7.fhir.convertors (5.6.3), ca.uhn.hapi.fhir:org.hl7.fhir.validation (5.6.3) potentially affected by CVE-2026-33180 via ca.uhn.hapi.fhir:org.hl7.fhir.r5 (5.6.3)

ca.uhn.hapi.fhir:org.hl7.fhir.r5 MAVEN version 5.6.3 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:org.hl7.fhir.r5 and may be impacted: - ca.uhn.hapi.fhir:org.hl7.fhir.convertors 5.6.3 - ca.uhn.hapi.fhir:org.hl7.fhir.validation 5.6.3...

ca.uhn.hapi.fhir:org.hl7.fhir.convertors (0.0.2), ca.uhn.hapi.fhir:org.hl7.fhir.validation (0.0.2) potentially affected by CVE-2026-33180 via ca.uhn.hapi.fhir:org.hl7.fhir.dstu2 (0.0.2)

ca.uhn.hapi.fhir:org.hl7.fhir.dstu2 MAVEN version 0.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:org.hl7.fhir.dstu2 and may be impacted: - ca.uhn.hapi.fhir:org.hl7.fhir.convertors 0.0.2 - ca.uhn.hapi.fhir:org.hl7.fhir.validation...

ca.uhn.hapi.fhir:org.hl7.fhir.convertors (5.5.3), ca.uhn.hapi.fhir:org.hl7.fhir.validation (5.5.3) potentially affected by CVE-2026-33180 via ca.uhn.hapi.fhir:org.hl7.fhir.dstu2 (5.5.3)

ca.uhn.hapi.fhir:org.hl7.fhir.dstu2 MAVEN version 5.5.3 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:org.hl7.fhir.dstu2 and may be impacted: - ca.uhn.hapi.fhir:org.hl7.fhir.convertors 5.5.3 - ca.uhn.hapi.fhir:org.hl7.fhir.validation...

ca.uhn.hapi.fhir:org.hl7.fhir.convertors (5.1.22), ca.uhn.hapi.fhir:org.hl7.fhir.validation (5.1.22) +3 more potentially affected by CVE-2026-33180 via ca.uhn.hapi.fhir:org.hl7.fhir.r5 (5.1.22)

ca.uhn.hapi.fhir:org.hl7.fhir.r5 MAVEN version 5.1.22 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:org.hl7.fhir.r5 and may be impacted: - ca.uhn.hapi.fhir:org.hl7.fhir.convertors 5.1.22 - ca.uhn.hapi.fhir:org.hl7.fhir.validation...

ca.uhn.hapi.fhir:org.hl7.fhir.convertors (5.6.98), ca.uhn.hapi.fhir:org.hl7.fhir.validation (5.6.98) +3 more potentially affected by CVE-2026-33180 via ca.uhn.hapi.fhir:org.hl7.fhir.r5 (5.6.98)

ca.uhn.hapi.fhir:org.hl7.fhir.r5 MAVEN version 5.6.98 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:org.hl7.fhir.r5 and may be impacted: - ca.uhn.hapi.fhir:org.hl7.fhir.convertors 5.6.98 - ca.uhn.hapi.fhir:org.hl7.fhir.validation...

ca.uhn.hapi.fhir:org.hl7.fhir.convertors (5.3.7), ca.uhn.hapi.fhir:org.hl7.fhir.validation (5.3.7) potentially affected by CVE-2026-33180 via ca.uhn.hapi.fhir:org.hl7.fhir.dstu2 (5.3.7)

ca.uhn.hapi.fhir:org.hl7.fhir.dstu2 MAVEN version 5.3.7 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:org.hl7.fhir.dstu2 and may be impacted: - ca.uhn.hapi.fhir:org.hl7.fhir.convertors 5.3.7 - ca.uhn.hapi.fhir:org.hl7.fhir.validation...