ca.uhn.hapi.fhir:org.hl7.fhir.convertors (5.6.85), ca.uhn.hapi.fhir:org.hl7.fhir.dstu2 (5.6.85) +9 more potentially affected by CVE-2024-52007 via ca.uhn.hapi.fhir:org.hl7.fhir.utilities (5.6.85)

ca.uhn.hapi.fhir:org.hl7.fhir.utilities MAVEN version 5.6.85 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:org.hl7.fhir.utilities and may be impacted: - ca.uhn.hapi.fhir:org.hl7.fhir.convertors 5.6.85 -...

ca.uhn.hapi.fhir:org.hl7.fhir.convertors (5.6.89), ca.uhn.hapi.fhir:org.hl7.fhir.dstu2 (5.6.89) +9 more potentially affected by CVE-2024-52007 via ca.uhn.hapi.fhir:org.hl7.fhir.utilities (5.6.89)

ca.uhn.hapi.fhir:org.hl7.fhir.utilities MAVEN version 5.6.89 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:org.hl7.fhir.utilities and may be impacted: - ca.uhn.hapi.fhir:org.hl7.fhir.convertors 5.6.89 -...

ca.uhn.hapi.fhir:org.hl7.fhir.convertors (5.6.93), ca.uhn.hapi.fhir:org.hl7.fhir.dstu2 (5.6.93) +9 more potentially affected by CVE-2024-52007 via ca.uhn.hapi.fhir:org.hl7.fhir.utilities (5.6.93)

ca.uhn.hapi.fhir:org.hl7.fhir.utilities MAVEN version 5.6.93 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:org.hl7.fhir.utilities and may be impacted: - ca.uhn.hapi.fhir:org.hl7.fhir.convertors 5.6.93 -...

ca.uhn.hapi.fhir:hapi-fhir-base-test-jaxrsserver-kotlin (6.4.1), ca.uhn.hapi.fhir:hapi-fhir-base-test-mindeps-client (6.4.1) +51 more potentially affected by CVE-2024-52007 via ca.uhn.hapi.fhir:org.hl7.fhir.utilities (5.6.97)

ca.uhn.hapi.fhir:org.hl7.fhir.utilities MAVEN version 5.6.97 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:org.hl7.fhir.utilities and may be impacted: - ca.uhn.hapi.fhir:hapi-fhir-base-test-jaxrsserver-kotlin 6.4.1 -...

ca.uhn.hapi.fhir:org.hl7.fhir.convertors (5.6.107), ca.uhn.hapi.fhir:org.hl7.fhir.dstu2 (5.6.107) +6 more potentially affected by CVE-2024-52007 via ca.uhn.hapi.fhir:org.hl7.fhir.utilities (5.6.107)

ca.uhn.hapi.fhir:org.hl7.fhir.utilities MAVEN version 5.6.107 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:org.hl7.fhir.utilities and may be impacted: - ca.uhn.hapi.fhir:org.hl7.fhir.convertors 5.6.107 -...

ca.uhn.hapi.fhir:org.hl7.fhir.convertors (5.6.109), ca.uhn.hapi.fhir:org.hl7.fhir.dstu2 (5.6.109) +9 more potentially affected by CVE-2024-52007 via ca.uhn.hapi.fhir:org.hl7.fhir.utilities (5.6.109)

ca.uhn.hapi.fhir:org.hl7.fhir.utilities MAVEN version 5.6.109 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:org.hl7.fhir.utilities and may be impacted: - ca.uhn.hapi.fhir:org.hl7.fhir.convertors 5.6.109 -...

ca.uhn.hapi.fhir:org.hl7.fhir.convertors (1.1.67), ca.uhn.hapi.fhir:org.hl7.fhir.dstu2 (1.1.67) +5 more potentially affected by CVE-2024-52007 via ca.uhn.hapi.fhir:org.hl7.fhir.utilities (1.1.67)

ca.uhn.hapi.fhir:org.hl7.fhir.utilities MAVEN version 1.1.67 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:org.hl7.fhir.utilities and may be impacted: - ca.uhn.hapi.fhir:org.hl7.fhir.convertors 1.1.67 -...

ca.uhn.hapi.fhir:hapi-fhir-cli-api (4.2.0), ca.uhn.hapi.fhir:hapi-fhir-cli-jpaserver (4.2.0) +69 more potentially affected by CVE-2024-52007 via ca.uhn.hapi.fhir:org.hl7.fhir.utilities (4.2.0)

ca.uhn.hapi.fhir:org.hl7.fhir.utilities MAVEN version 4.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:org.hl7.fhir.utilities and may be impacted: - ca.uhn.hapi.fhir:hapi-fhir-cli-api 4.2.0 - ca.uhn.hapi.fhir:hapi-fhir-cli-jpaserv...

ca.uhn.hapi.fhir:hapi-fhir-cli-api (4.0.3), ca.uhn.hapi.fhir:hapi-fhir-converter (4.0.3) +26 more potentially affected by CVE-2024-52007 via ca.uhn.hapi.fhir:org.hl7.fhir.utilities (4.0.3)

ca.uhn.hapi.fhir:org.hl7.fhir.utilities MAVEN version 4.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:org.hl7.fhir.utilities and may be impacted: - ca.uhn.hapi.fhir:hapi-fhir-cli-api 4.0.3 - ca.uhn.hapi.fhir:hapi-fhir-converter...

ca.uhn.hapi.fhir:hapi-fhir-cli-api (4.1.0), ca.uhn.hapi.fhir:hapi-fhir-cli-jpaserver (4.1.0) +82 more potentially affected by CVE-2024-52007 via ca.uhn.hapi.fhir:org.hl7.fhir.utilities (4.1.0)

ca.uhn.hapi.fhir:org.hl7.fhir.utilities MAVEN version 4.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:org.hl7.fhir.utilities and may be impacted: - ca.uhn.hapi.fhir:hapi-fhir-cli-api 4.1.0 - ca.uhn.hapi.fhir:hapi-fhir-cli-jpaserv...

ca.uhn.hapi.fhir:hapi-fhir-cli-api (>=5.0.0, <=5.0.2), ca.uhn.hapi.fhir:hapi-fhir-cli-jpaserver (>=5.0.0, <=5.0.2) +65 more potentially affected by CVE-2024-52007 via ca.uhn.hapi.fhir:org.hl7.fhir.utilities (5.0.0)

ca.uhn.hapi.fhir:org.hl7.fhir.utilities MAVEN version 5.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:org.hl7.fhir.utilities and may be impacted: - ca.uhn.hapi.fhir:hapi-fhir-cli-api =5.0.0, =5.0.0, =5.0.0, =5.0.0, =5.0.0, =5.0.0...

CVE-2024-52007: Improper Restriction of XML External Entity Reference

HAPI FHIR is a complete implementation of the HL7 FHIR standard for healthcare interoperability in Java. XSLT parsing performed by various components are vulnerable to XML external entity injections. A processed XML file with a malicious DTD tag could produce XML containing data from the host...

ca.uhn.hapi.fhir:hapi-fhir-cli-api (>=3.8.0, <=4.2.0), ca.uhn.hapi.fhir:hapi-fhir-cli-jpaserver (>=4.1.0, <=4.2.0) +567 more potentially affected by CVE-2023-1932 via org.hibernate:hibernate-validator (5.4.2.final)

org.hibernate:hibernate-validator MAVEN version 5.4.2.final is affected by a known vulnerability. The following packages have a transitive dependency on org.hibernate:hibernate-validator and may be impacted: - ca.uhn.hapi.fhir:hapi-fhir-cli-api =3.8.0, =4.1.0, =3.8.0, =3.8.0, =3.8.0, =4.0.0,...

CVE-2024-51132

A flaw was found in Fast Healthcare Interoperability Resources HAPI FHIR. This vulnerability could allow attackers to execute arbitrary code or access sensitive information via a crafted request which contains malicious XML entities. Mitigation Red Hat has investigated whether a possible mitigati...

ca.uhn.hapi.fhir:org.hl7.fhir.convertors (5.6.89), ca.uhn.hapi.fhir:org.hl7.fhir.validation (5.6.89) +3 more potentially affected by CVE-2024-51132 via ca.uhn.hapi.fhir:org.hl7.fhir.dstu2 (5.6.89)

ca.uhn.hapi.fhir:org.hl7.fhir.dstu2 MAVEN version 5.6.89 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:org.hl7.fhir.dstu2 and may be impacted: - ca.uhn.hapi.fhir:org.hl7.fhir.convertors 5.6.89 - ca.uhn.hapi.fhir:org.hl7.fhir.validati...

ca.uhn.hapi.fhir:org.hl7.fhir.convertors (5.1.21), ca.uhn.hapi.fhir:org.hl7.fhir.dstu2 (5.1.21) +8 more potentially affected by CVE-2024-51132 via ca.uhn.hapi.fhir:org.hl7.fhir.utilities (5.1.21)

ca.uhn.hapi.fhir:org.hl7.fhir.utilities MAVEN version 5.1.21 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:org.hl7.fhir.utilities and may be impacted: - ca.uhn.hapi.fhir:org.hl7.fhir.convertors 5.1.21 -...

ca.uhn.hapi.fhir:hapi-fhir-cli-api (>=5.2.0, <=5.2.1), ca.uhn.hapi.fhir:hapi-fhir-cli-jpaserver (>=5.2.0, <=5.2.1) +71 more potentially affected by CVE-2024-51132 via ca.uhn.hapi.fhir:org.hl7.fhir.utilities (5.2.0)

ca.uhn.hapi.fhir:org.hl7.fhir.utilities MAVEN version 5.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:org.hl7.fhir.utilities and may be impacted: - ca.uhn.hapi.fhir:hapi-fhir-cli-api =5.2.0, =5.2.0, =5.2.0, =5.2.0, =5.2.0, =5.2.0...

ca.uhn.hapi.fhir:hapi-fhir-base-test-jaxrsserver-kotlin (6.4.0), ca.uhn.hapi.fhir:hapi-fhir-base-test-mindeps-client (6.4.0) +47 more potentially affected by CVE-2024-51132 via ca.uhn.hapi.fhir:org.hl7.fhir.utilities (5.6.881)

ca.uhn.hapi.fhir:org.hl7.fhir.utilities MAVEN version 5.6.881 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:org.hl7.fhir.utilities and may be impacted: - ca.uhn.hapi.fhir:hapi-fhir-base-test-jaxrsserver-kotlin 6.4.0 -...

au.csiro.pathling:encoders (>=6.2.2, <=7.1.0), au.csiro.pathling:fhir-server (>=6.2.2, <=7.1.0) +206 more potentially affected by CVE-2024-51132 via ca.uhn.hapi.fhir:org.hl7.fhir.utilities (>=6.0.0, <=6.3.32)

ca.uhn.hapi.fhir:org.hl7.fhir.utilities MAVEN version =6.0.0, =6.2.2, =6.2.2, =6.2.2, =6.2.2, =6.2.2, =6.2.2, =6.6.0, =6.6.0, =6.6.0, =6.6.0, =6.6.0, =6.6.0, =6.6.0, =7.4.5 and more Source cves: CVE-2024-51132 Source advisory: OSV:GHSA-4CF2-CXP3-RJR7...

ca.uhn.hapi.fhir:org.hl7.fhir.convertors (5.6.94), ca.uhn.hapi.fhir:org.hl7.fhir.dstu2 (5.6.94) +6 more potentially affected by CVE-2024-51132 via ca.uhn.hapi.fhir:org.hl7.fhir.utilities (5.6.94)

ca.uhn.hapi.fhir:org.hl7.fhir.utilities MAVEN version 5.6.94 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:org.hl7.fhir.utilities and may be impacted: - ca.uhn.hapi.fhir:org.hl7.fhir.convertors 5.6.94 -...