ca.uhn.hapi.fhir:hapi-fhir-cli-api (>=5.3.0, <=5.3.3), ca.uhn.hapi.fhir:hapi-fhir-cli-jpaserver (>=5.3.0, <=5.3.3) +74 more potentially affected by CVE-2024-45294 +1 more via ca.uhn.hapi.fhir:org.hl7.fhir.utilities (5.3.0)

ca.uhn.hapi.fhir:org.hl7.fhir.utilities MAVEN version 5.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:org.hl7.fhir.utilities and may be impacted: - ca.uhn.hapi.fhir:hapi-fhir-cli-api =5.3.0, =5.3.0, =5.3.0, =5.3.0, =5.3.0, =5.3.0...

ca.uhn.hapi.fhir:hapi-fhir-cli-api (>=5.2.0, <=5.2.1), ca.uhn.hapi.fhir:hapi-fhir-cli-jpaserver (>=5.2.0, <=5.2.1) +59 more potentially affected by CVE-2024-45294 +1 more via ca.uhn.hapi.fhir:org.hl7.fhir.r4 (5.2.0)

ca.uhn.hapi.fhir:org.hl7.fhir.r4 MAVEN version 5.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:org.hl7.fhir.r4 and may be impacted: - ca.uhn.hapi.fhir:hapi-fhir-cli-api =5.2.0, =5.2.0, =5.2.0, =5.2.0, =5.2.0, =5.2.0, =5.2.0,...

ca.uhn.hapi.fhir:hapi-fhir-cli-api (>=6.6.0, <=7.4.3), ca.uhn.hapi.fhir:hapi-fhir-cli-app (>=6.6.0, <=7.4.3) +153 more potentially affected by CVE-2024-45294 via ca.uhn.hapi.fhir:org.hl7.fhir.r5 (>=6.0.0, <=6.3.22)

ca.uhn.hapi.fhir:org.hl7.fhir.r5 MAVEN version =6.0.0, =6.6.0, =6.6.0, =6.6.0, =6.6.0, =6.6.0, =6.6.0, =6.8.0, =6.6.0, =6.6.0, =6.6.0, =6.6.0, =6.6.0, =6.6.0, =6.8.0, =7.4.3 and more Source cves: CVE-2024-45294 Source advisory: GHSA-6CR6-PH3P-F5RF...

ca.uhn.hapi.fhir:hapi-fhir-cli-api (>=3.4.0, <=7.4.3), ca.uhn.hapi.fhir:hapi-fhir-cli-app (>=5.7.7, <=7.4.3) +181 more potentially affected by CVE-2024-45294 via ca.uhn.hapi.fhir:org.hl7.fhir.r4b (>=5.6.22, <=6.3.22)

ca.uhn.hapi.fhir:org.hl7.fhir.r4b MAVEN version =5.6.22, =3.4.0, =5.7.7, =5.7.0, =5.7.0, =5.7.0, =5.7.0, =5.7.0, =6.2.0, =6.8.0, =6.4.0, =5.7.0, =5.7.0, =5.7.0, =5.7.0, =5.7.7, =6.8.0 and more Source cves: CVE-2024-45294 Source advisory: MEND:CVE-2024-45294...

ca.uhn.hapi.fhir:hapi-fhir-cli-api (>=3.4.0, <=7.4.3), ca.uhn.hapi.fhir:hapi-fhir-cli-app (>=5.6.5, <=7.4.3) +234 more potentially affected by CVE-2024-45294 via ca.uhn.hapi.fhir:org.hl7.fhir.r5 (>=0.0.1, <=6.3.22)

ca.uhn.hapi.fhir:org.hl7.fhir.r5 MAVEN version =0.0.1, =3.4.0, =5.6.5, =4.1.0, =4.0.3, =4.1.0, =4.0.0, =5.0.0, =4.0.0, =5.3.0, =6.2.0, =5.1.0, =6.8.0, =6.4.0, =5.3.0, =4.0.0, =5.5.7 and more Source cves: CVE-2024-45294 Source advisory: MEND:CVE-2024-45294...

ca.uhn.hapi.fhir:hapi-fhir-cli-api (>=6.4.0, <=6.6.2), ca.uhn.hapi.fhir:hapi-fhir-cli-app (>=6.4.0, <=6.6.2) +343 more potentially affected by CVE-2024-40094 via com.graphql-java:graphql-java (>=19.0, <=19.8)

com.graphql-java:graphql-java MAVEN version =19.0, =6.4.0, =6.4.0, =6.4.0, =6.4.0, =6.4.0, =6.4.0, =6.4.0, =6.4.0, =6.4.0, =2.0.4, =1.6.9, =14.3.0, =17.7.0 - com.datasqrl:sqrl-base 0.6.0 and more Source cves: CVE-2024-40094 Source advisory: GHSA-H9MQ-F6Q5-6C8M...

ca.uhn.hapi.fhir:hapi-fhir-cli-api (>=7.2.0, <=7.4.5), ca.uhn.hapi.fhir:hapi-fhir-cli-app (>=7.2.0, <=7.4.5) +409 more potentially affected by CVE-2023-7272 via org.eclipse.parsson:parsson (>=1.0.0, <=1.0.3)

org.eclipse.parsson:parsson MAVEN version =1.0.0, =7.2.0, =7.2.0, =7.2.0, =7.2.0, =7.2.0, =7.2.0, =7.2.0, =7.2.0, =7.2.0, =1.0, =0.3.8, =0.3.0, =0.2.3, =1.1.0, =1.4.4 and more Source cves: CVE-2023-7272 Source advisory: GHSA-2RWM-XV5J-777P...

ca.uhn.hapi.fhir:hapi-fhir-cli-api (>=4.0.0, <=6.4.1), ca.uhn.hapi.fhir:hapi-fhir-cli-app (>=5.6.5, <=6.4.1) +132 more potentially affected by CVE-2023-28465 via ca.uhn.hapi.fhir:org.hl7.fhir.validation (>=1.0.0, <=5.6.105)

ca.uhn.hapi.fhir:org.hl7.fhir.validation MAVEN version =1.0.0, =4.0.0, =5.6.5, =4.1.0, =4.1.0, =4.0.0, =5.0.0, =4.0.0, =5.3.0, =6.2.0, =5.1.0, =5.3.0, =4.0.0, =4.0.0, =4.0.0, =5.4.0 and more Source cves: CVE-2023-28465 Source advisory: MEND:CVE-2023-28465...

dbt-coves (>=0.21.0a2, <=0.21.0a16), dwhgen (0.1.0) +1 more potentially affected by CVE-2023-36830 via sqlfluff (0.7.1)

sqlfluff PYPI version 0.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on sqlfluff and may be impacted: - dbt-coves =0.21.0a2, =0.1.0, =0.14.0 Source cves: CVE-2023-36830 Source advisory: OSV:GHSA-JQHC-M2J3-FJRX...

dbt-coves (>=0.21.0a2, <=0.21.0a16), dwhgen (0.1.0) +1 more potentially affected by CVE-2023-36830 via sqlfluff (0.7.1)

sqlfluff PYPI version 0.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on sqlfluff and may be impacted: - dbt-coves =0.21.0a2, =0.1.0, =0.14.0 Source cves: CVE-2023-36830 Source advisory: OSV:PYSEC-2023-111...

ca.uhn.hapi.fhir:hapi-fhir-cli-api (>=6.0.0, <=6.2.5), ca.uhn.hapi.fhir:hapi-fhir-cli-app (>=6.0.3, <=6.2.5) +822 more potentially affected by CVE-2023-28867 via com.graphql-java:graphql-java (>=1.3, <=17.4)

com.graphql-java:graphql-java MAVEN version =1.3, =6.0.0, =6.0.3, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.2.0, =6.0.0, =6.0.0, =6.0.3, =0.1.0, =1.0.0, =2.8.5, =1.3.0, =1.1.0, =2.27.0 and more Source cves: CVE-2023-28867 Source advisory: OSV:GHSA-P4QX-6W5P-4RJ2...

ca.uhn.hapi.fhir:hapi-fhir-cli-api (>=6.4.0, <=6.4.7), ca.uhn.hapi.fhir:hapi-fhir-cli-app (>=6.4.0, <=6.4.7) +325 more potentially affected by CVE-2023-28867 via com.graphql-java:graphql-java (>=19.0, <=19.3)

com.graphql-java:graphql-java MAVEN version =19.0, =6.4.0, =6.4.0, =6.4.0, =6.4.0, =6.4.0, =6.4.0, =6.4.0, =6.4.0, =6.4.0, =2.0.4, =14.3.0, =17.5.0 - com.datasqrl:sqrl-base 0.6.0 - com.datasqrl:sqrl-calcite 0.6.0 and more Source cves: CVE-2023-28867 Source advisory: GHSA-P4QX-6W5P-4RJ2...

ca.uhn.hapi.fhir:hapi-fhir-cli-api (>=6.4.0, <=6.4.7), ca.uhn.hapi.fhir:hapi-fhir-cli-app (>=6.4.0, <=6.4.7) +325 more potentially affected by CVE-2023-28867 via com.graphql-java:graphql-java (>=19.0, <=19.3)

com.graphql-java:graphql-java MAVEN version =19.0, =6.4.0, =6.4.0, =6.4.0, =6.4.0, =6.4.0, =6.4.0, =6.4.0, =6.4.0, =6.4.0, =2.0.4, =14.3.0, =17.5.0 - com.datasqrl:sqrl-base 0.6.0 - com.datasqrl:sqrl-calcite 0.6.0 and more Source cves: CVE-2023-28867 Source advisory: OSV:GHSA-P4QX-6W5P-4RJ2...

ca.uhn.hapi.fhir:hapi-fhir-cli-api (>=6.4.0, <=6.4.7), ca.uhn.hapi.fhir:hapi-fhir-cli-app (>=6.4.0, <=6.4.7) +325 more potentially affected by CVE-2023-28867 via com.graphql-java:graphql-java (>=19.0, <=19.3)

com.graphql-java:graphql-java MAVEN version =19.0, =6.4.0, =6.4.0, =6.4.0, =6.4.0, =6.4.0, =6.4.0, =6.4.0, =6.4.0, =6.4.0, =2.0.4, =14.3.0, =17.5.0 - com.datasqrl:sqrl-base 0.6.0 - com.datasqrl:sqrl-calcite 0.6.0 and more Source cves: CVE-2023-28867 Source advisory: MEND:CVE-2023-28867...

ca.uhn.hapi.fhir:hapi-fhir-cli-api (>=5.0.0, <=6.4.1), ca.uhn.hapi.fhir:hapi-fhir-cli-app (>=5.6.5, <=6.4.1) +125 more potentially affected by CVE-2023-24057 +1 more via ca.uhn.hapi.fhir:org.hl7.fhir.validation (>=5.0.0, <=5.6.105)

ca.uhn.hapi.fhir:org.hl7.fhir.validation MAVEN version =5.0.0, =5.0.0, =5.6.5, =5.0.0, =5.0.0, =5.0.0, =5.0.0, =5.0.0, =5.3.0, =6.2.0, =5.1.0, =5.3.0, =5.0.0, =5.0.0, =5.2.0, =5.4.0 and more Source cves: CVE-2023-24057, CVE-2023-28465 Source advisory: GHSA-9654-PR4F-GH6M...

ca.uhn.hapi.fhir:hapi-fhir-cli-api (>=4.0.0, <=4.0.1), ca.uhn.hapi.fhir:hapi-fhir-converter (>=4.0.0, <=4.0.1) +7 more potentially affected by CVE-2023-28465 via ca.uhn.hapi.fhir:org.hl7.fhir.convertors (4.0.0)

ca.uhn.hapi.fhir:org.hl7.fhir.convertors MAVEN version 4.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:org.hl7.fhir.convertors and may be impacted: - ca.uhn.hapi.fhir:hapi-fhir-cli-api =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.0,...

ca.uhn.hapi.fhir:hapi-fhir-cli-api (4.0.3), ca.uhn.hapi.fhir:hapi-fhir-converter (4.0.3) +8 more potentially affected by CVE-2023-28465 via ca.uhn.hapi.fhir:org.hl7.fhir.convertors (4.0.3)

ca.uhn.hapi.fhir:org.hl7.fhir.convertors MAVEN version 4.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:org.hl7.fhir.convertors and may be impacted: - ca.uhn.hapi.fhir:hapi-fhir-cli-api 4.0.3 - ca.uhn.hapi.fhir:hapi-fhir-converter...

au.csiro.pathling:encoders (>=5.1.0, <=6.1.4), au.csiro.pathling:fhir-server (>=5.3.1, <=6.1.4) +209 more potentially affected by CVE-2023-28465 via ca.uhn.hapi.fhir:org.hl7.fhir.utilities (>=5.0.0, <=5.6.105)

ca.uhn.hapi.fhir:org.hl7.fhir.utilities MAVEN version =5.0.0, =5.1.0, =5.3.1, =5.3.1, =5.3.1, =5.3.0, =0.0.9, =5.6.5, =5.6.5, =5.6.5, =5.0.0, =5.6.5, =5.0.0, =5.0.0, =5.0.0, =5.0.0, =5.2.1 and more Source cves: CVE-2023-28465 Source advisory: OSV:GHSA-9654-PR4F-GH6M...

ca.uhn.hapi.fhir:hapi-fhir-cli-api (>=4.0.0, <=4.0.1), ca.uhn.hapi.fhir:hapi-fhir-igpacks (>=4.0.0, <=4.0.1) +15 more potentially affected by CVE-2023-28465 via ca.uhn.hapi.fhir:org.hl7.fhir.utilities (4.0.0)

ca.uhn.hapi.fhir:org.hl7.fhir.utilities MAVEN version 4.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:org.hl7.fhir.utilities and may be impacted: - ca.uhn.hapi.fhir:hapi-fhir-cli-api =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.0...

ca.uhn.hapi.fhir:hapi-fhir-cli-api (>=5.0.0, <=6.4.1), ca.uhn.hapi.fhir:hapi-fhir-cli-app (>=5.6.5, <=6.4.1) +125 more potentially affected by CVE-2023-28465 via ca.uhn.hapi.fhir:org.hl7.fhir.validation (>=5.0.0, <=5.6.105)

ca.uhn.hapi.fhir:org.hl7.fhir.validation MAVEN version =5.0.0, =5.0.0, =5.6.5, =5.0.0, =5.0.0, =5.0.0, =5.0.0, =5.0.0, =5.3.0, =6.2.0, =5.1.0, =5.3.0, =5.0.0, =5.0.0, =5.2.0, =5.4.0 and more Source cves: CVE-2023-28465 Source advisory: OSV:GHSA-9654-PR4F-GH6M...