ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base (1.4), ca.uhn.hapi.fhir:hapi-fhir-testpage-overlay (1.4) +134 more potentially affected by CVE-2022-22971 via org.springframework:spring-messaging (4.2.4.release)

org.springframework:spring-messaging MAVEN version 4.2.4.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-messaging and may be impacted: - ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base 1.4 -...

br.jus.stf.digital:core (>=2.0.0, <=2.3.1), ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base (>=2.4, <=2.5) +325 more potentially affected by CVE-2022-22971 via org.springframework:spring-messaging (4.3.7.release)

org.springframework:spring-messaging MAVEN version 4.3.7.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-messaging and may be impacted: - br.jus.stf.digital:core =2.0.0, =2.4, =1.1.0, =1.1.0, =1.0.1-release,...

ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base (1.6), ca.uhn.hapi.fhir:hapi-fhir-testpage-overlay (1.6) +168 more potentially affected by CVE-2022-22970 via org.springframework:spring-beans (4.3.0.release)

org.springframework:spring-beans MAVEN version 4.3.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-beans and may be impacted: - ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base 1.6 -...

ai.preferred:venom (>=4.1.3, <=4.2.7), at.ganzleicht.vaadin:vaadin-client-compiler (9.1.3) +1071 more potentially affected by CVE-2022-29546 via net.sourceforge.htmlunit:neko-htmlunit (>=2.21, <=2.60.0)

net.sourceforge.htmlunit:neko-htmlunit MAVEN version =2.21, =4.1.3, =1.0.0, =1.0.0, =1.0.0, =1, =2.0, =0.9.6, =0.9.6, =0.0.10, =0.14, =5.4.0, =5.4.0, =6.1.3 and more Source cves: CVE-2022-29546 Source advisory: MEND:CVE-2022-29546...

ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base (>=2.0, <=2.2), ca.uhn.hapi.fhir:hapi-fhir-testpage-overlay (>=2.0, <=2.2) +364 more potentially affected by CVE-2022-22968 via org.springframework:spring-context (4.3.1.release)

org.springframework:spring-context MAVEN version 4.3.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-context and may be impacted: - ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base =2.0, =2.0, =2.0, =2.1.0-release,...

ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base (>=2.0, <=2.2), ca.uhn.hapi.fhir:hapi-fhir-testpage-overlay (>=2.0, <=2.2) +348 more potentially affected by CVE-2022-22950 via org.springframework:spring-expression (4.3.1.release)

org.springframework:spring-expression MAVEN version 4.3.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-expression and may be impacted: - ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base =2.0, =2.0, =2.0, =2.1.0-release,...

@asciidoctor/reveal.js (>=5.0.0-rc.1, <=5.0.1), hapi-reveal (4.0.0) +1 more potentially affected by CVE-2022-0776 via reveal.js (>=4.0.2, <=4.2.1)

reveal.js NPM version =4.0.2, =5.0.0-rc.1, =4.0.0-beta.0, =5.3.2 Source cves: CVE-2022-0776 Source advisory: OSV:GHSA-HHQJ-CFJX-VJ25...

@asciidoctor/reveal.js (>=5.0.0-rc.1, <=5.0.1), hapi-reveal (4.0.0) +1 more potentially affected by CVE-2022-0776 via reveal.js (>=4.0.2, <=4.2.1)

reveal.js NPM version =4.0.2, =5.0.0-rc.1, =4.0.0-beta.0, =5.3.2 Source cves: CVE-2022-0776 Source advisory: GHSA-HHQJ-CFJX-VJ25...

ca.uhn.hapi.fhir.karaf:hapi-fhir (>=3.3.0, <=3.7.0), com.esri.geoevent.sdk:geoevent-sdk (>=10.6.0, <=10.9.0) +201 more potentially affected by unknown CVE via org.ops4j.pax.logging:pax-logging-log4j2 (>=1.8.2, <=1.11.9)

org.ops4j.pax.logging:pax-logging-log4j2 MAVEN version =1.8.2, =3.3.0, =10.6.0, =2.2.0, =2.2.0, =2.2.0, =2.2.0, =0.2.0, =7.3.0, =7.3.0, =7.2.0, =7.2.0, =7.2.0, =7.2.0, =7.2.0, =7.7.0 and more Source cves: unknown CVE Source advisory: OSV:GHSA-XXFH-X98P-J8FR...

ca.uhn.hapi.fhir:hapi-fhir-cli-api (>=5.1.0, <=5.2.1), ca.uhn.hapi.fhir:hapi-fhir-cli-jpaserver (>=5.1.0, <=5.2.1) +664 more potentially affected by CVE-2021-22144 via org.elasticsearch:elasticsearch (>=6.0.0-alpha1, <=6.8.16)

org.elasticsearch:elasticsearch MAVEN version =6.0.0-alpha1, =5.1.0, =5.1.0, =5.1.0, =5.1.0, =5.1.0, =5.1.0, =5.1.0, =5.1.0, =0.1.0, =4.0.0-beta-1, =1.2.0.release, =1.1.1.release, =1.4.2.release and more Source cves: CVE-2021-22144 Source advisory: OSV:GHSA-3393-HVRJ-W7V3...

ca.uhn.hapi.fhir:hapi-fhir-cli-api (>=5.3.0, <=5.7.9), ca.uhn.hapi.fhir:hapi-fhir-cli-app (>=5.6.5, <=5.7.9) +383 more potentially affected by CVE-2021-22145 via org.elasticsearch.client:elasticsearch-rest-client (>=7.10.0, <=7.13.3)

org.elasticsearch.client:elasticsearch-rest-client MAVEN version =7.10.0, =5.3.0, =5.6.5, =5.3.0, =5.3.0, =5.3.0, =5.3.0, =5.3.0, =5.3.0, =5.3.0, =5.3.0, =5.3.0, =5.3.0, =5.3.0, =5.3.0, =5.6.5, =5.7.9 and more Source cves: CVE-2021-22145 Source advisory: MEND:CVE-2021-22145...

ca.uhn.hapi.fhir:hapi-fhir-cli-api (>=5.1.0, <=5.2.1), ca.uhn.hapi.fhir:hapi-fhir-cli-jpaserver (>=5.1.0, <=5.2.1) +661 more potentially affected by CVE-2021-22135 via org.elasticsearch:elasticsearch (>=6.0.0-alpha1, <=6.8.14)

org.elasticsearch:elasticsearch MAVEN version =6.0.0-alpha1, =5.1.0, =5.1.0, =5.1.0, =5.1.0, =5.1.0, =5.1.0, =5.1.0, =5.1.0, =0.1.0, =4.0.0-beta-1, =1.2.0.release, =1.1.1.release, =1.4.2.release and more Source cves: CVE-2021-22135 Source advisory: OSV:GHSA-62WW-4P3P-7FHJ...

ca.uhn.hapi.fhir:hapi-fhir-cli-api (4.2.0), ca.uhn.hapi.fhir:hapi-fhir-cli-jpaserver (4.2.0) +4 more potentially affected by CVE-2021-32053 via ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base (4.2.0)

ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base MAVEN version 4.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base and may be impacted: - ca.uhn.hapi.fhir:hapi-fhir-cli-api 4.2.0 -...

org.hspconsortium:hsp-api-webapp (0.8), org.hspconsortium:hsp-client-profile-extension-example (0.8) +1 more potentially affected by CVE-2021-32053 via ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base (1.1)

ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base MAVEN version 1.1 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base and may be impacted: - org.hspconsortium:hsp-api-webapp 0.8 -...

ca.uhn.hapi.fhir:hapi-fhir-cli-api (4.0.1), ca.uhn.hapi.fhir:hapi-fhir-igpacks (4.0.1) +1 more potentially affected by CVE-2021-32053 via ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base (4.0.1)

ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base MAVEN version 4.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base and may be impacted: - ca.uhn.hapi.fhir:hapi-fhir-cli-api 4.0.1 - ca.uhn.hapi.fhir:hapi-fhir-igpacks...

GHSA-67F6-C8MX-4Q2M Uncontrolled Resource Consumption in JPA Server in HAPI FHIR

JPA Server in HAPI FHIR before 5.4.0 allows a user to deny service e.g., disable access to the database after the attack stops via history requests. This occurs because of a SELECT COUNT statement that requires a full index scan, with an accompanying large amount of server resources if there are...

ca.uhn.hapi.fhir:hapi-fhir-testpage-overlay (1.0) potentially affected by CVE-2021-32053 via ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base (1.0)

ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base MAVEN version 1.0 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base and may be impacted: - ca.uhn.hapi.fhir:hapi-fhir-testpage-overlay 1.0 Source cves: CVE-2021-32053...

org.hspconsortium.reference:hspc-reference-api (>=1.10.4, <=1.10.5), org.hspconsortium.reference:hspc-reference-api-mysql (>=1.10.4, <=1.10.8) +5 more potentially affected by CVE-2021-32053 via ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base (3.2.0)

ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base MAVEN version 3.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base and may be impacted: - org.hspconsortium.reference:hspc-reference-api =1.10.4, =1.10.4, =1.10.4,...

ca.uhn.hapi.fhir:hapi-fhir-cli-api (3.7.0), ca.uhn.hapi.fhir:hapi-fhir-igpacks (3.7.0) +1 more potentially affected by CVE-2021-32053 via ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base (3.7.0)

ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base MAVEN version 3.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base and may be impacted: - ca.uhn.hapi.fhir:hapi-fhir-cli-api 3.7.0 - ca.uhn.hapi.fhir:hapi-fhir-igpacks...

org.hspconsortium.reference:hspc-reference-api (>=1.4.1, <=1.4.3), org.hspconsortium.reference:hspc-reference-api-mysql (>=1.4.1, <=1.4.3) +3 more potentially affected by CVE-2021-32053 via ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base (2.3)

ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base MAVEN version 2.3 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base and may be impacted: - org.hspconsortium.reference:hspc-reference-api =1.4.1, =1.4.1, =1.4.1, =1.4.1,...