ca.uhn.hapi.fhir:org.hl7.fhir.convertors (4.0.1), ca.uhn.hapi.fhir:org.hl7.fhir.dstu2 (4.0.1) +6 more potentially affected by CVE-2024-51132 via ca.uhn.hapi.fhir:org.hl7.fhir.utilities (4.0.1)

ca.uhn.hapi.fhir:org.hl7.fhir.utilities MAVEN version 4.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:org.hl7.fhir.utilities and may be impacted: - ca.uhn.hapi.fhir:org.hl7.fhir.convertors 4.0.1 -...

ca.uhn.hapi.fhir:hapi-fhir-cli-api (>=6.6.0, <=7.4.5), ca.uhn.hapi.fhir:hapi-fhir-cli-app (>=6.6.0, <=7.4.5) +144 more potentially affected by CVE-2024-51132 via ca.uhn.hapi.fhir:org.hl7.fhir.r4b (>=6.0.0, <=6.3.32)

ca.uhn.hapi.fhir:org.hl7.fhir.r4b MAVEN version =6.0.0, =6.6.0, =6.6.0, =6.6.0, =6.6.0, =6.6.0, =6.6.0, =6.8.0, =6.6.0, =6.6.0, =6.6.0, =6.6.0, =6.6.0, =6.8.0, =6.6.0, =7.4.5 and more Source cves: CVE-2024-51132 Source advisory: GHSA-4CF2-CXP3-RJR7...

ca.uhn.hapi.fhir:hapi-fhir-cli-api (>=6.6.0, <=7.4.5), ca.uhn.hapi.fhir:hapi-fhir-cli-app (>=6.6.0, <=7.4.5) +153 more potentially affected by CVE-2024-51132 via ca.uhn.hapi.fhir:org.hl7.fhir.r5 (>=6.0.0, <=6.3.32)

ca.uhn.hapi.fhir:org.hl7.fhir.r5 MAVEN version =6.0.0, =6.6.0, =6.6.0, =6.6.0, =6.6.0, =6.6.0, =6.6.0, =6.8.0, =6.6.0, =6.6.0, =6.6.0, =6.6.0, =6.6.0, =6.6.0, =6.8.0, =7.4.5 and more Source cves: CVE-2024-51132 Source advisory: GHSA-4CF2-CXP3-RJR7...

ca.uhn.hapi.fhir:hapi-fhir-cli-api (>=6.6.0, <=7.4.5), ca.uhn.hapi.fhir:hapi-fhir-cli-app (>=6.6.0, <=7.4.5) +133 more potentially affected by CVE-2024-51132 via ca.uhn.hapi.fhir:org.hl7.fhir.validation (>=6.0.0, <=6.3.32)

ca.uhn.hapi.fhir:org.hl7.fhir.validation MAVEN version =6.0.0, =6.6.0, =6.6.0, =6.6.0, =6.6.0, =6.6.0, =6.8.0, =6.6.0, =6.6.0, =6.6.0, =6.6.0, =6.6.0, =6.8.0, =6.6.0, =6.6.0, =7.4.5 and more Source cves: CVE-2024-51132 Source advisory: GHSA-4CF2-CXP3-RJR7...

ca.uhn.hapi.fhir:hapi-fhir-cli-api (>=6.6.0, <=7.4.5), ca.uhn.hapi.fhir:hapi-fhir-cli-app (>=6.6.0, <=7.4.5) +141 more potentially affected by CVE-2024-51132 via ca.uhn.hapi.fhir:org.hl7.fhir.convertors (>=6.0.0, <=6.3.32)

ca.uhn.hapi.fhir:org.hl7.fhir.convertors MAVEN version =6.0.0, =6.6.0, =6.6.0, =6.6.0, =6.6.0, =6.6.0, =6.6.0, =6.8.0, =6.6.0, =6.6.0, =6.6.0, =6.6.0, =6.6.0, =6.8.0, =6.6.0, =7.4.5 and more Source cves: CVE-2024-51132 Source advisory: GHSA-4CF2-CXP3-RJR7...

HAPI FHIR XML External Entity (XXE) vulnerability

An XML External Entity XXE vulnerability in HAPI FHIR before v6.4.0 allows attackers to access sensitive information or execute arbitrary code via supplying a crafted request containing malicious XML entities...

ca.uhn.hapi.fhir:hapi-fhir-cli-api (>=5.3.0, <=5.3.3), ca.uhn.hapi.fhir:hapi-fhir-cli-jpaserver (>=5.3.0, <=5.3.3) +45 more potentially affected by CVE-2024-51132 via ca.uhn.hapi.fhir:org.hl7.fhir.dstu2016may (5.3.0)

ca.uhn.hapi.fhir:org.hl7.fhir.dstu2016may MAVEN version 5.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:org.hl7.fhir.dstu2016may and may be impacted: - ca.uhn.hapi.fhir:hapi-fhir-cli-api =5.3.0, =5.3.0, =5.3.0, =5.3.0, =5.3.0,...

ca.uhn.hapi.fhir:org.hl7.fhir.convertors (5.3.4), ca.uhn.hapi.fhir:org.hl7.fhir.validation (5.3.4) potentially affected by CVE-2024-51132 via ca.uhn.hapi.fhir:org.hl7.fhir.dstu2016may (5.3.4)

ca.uhn.hapi.fhir:org.hl7.fhir.dstu2016may MAVEN version 5.3.4 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:org.hl7.fhir.dstu2016may and may be impacted: - ca.uhn.hapi.fhir:org.hl7.fhir.convertors 5.3.4 -...

ca.uhn.hapi.fhir:org.hl7.fhir.convertors (5.3.3), ca.uhn.hapi.fhir:org.hl7.fhir.validation (5.3.3) potentially affected by CVE-2024-51132 via ca.uhn.hapi.fhir:org.hl7.fhir.dstu2016may (5.3.3)

ca.uhn.hapi.fhir:org.hl7.fhir.dstu2016may MAVEN version 5.3.3 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:org.hl7.fhir.dstu2016may and may be impacted: - ca.uhn.hapi.fhir:org.hl7.fhir.convertors 5.3.3 -...

ca.uhn.hapi.fhir:org.hl7.fhir.convertors (5.3.5), ca.uhn.hapi.fhir:org.hl7.fhir.validation (5.3.5) potentially affected by CVE-2024-51132 via ca.uhn.hapi.fhir:org.hl7.fhir.dstu2016may (5.3.5)

ca.uhn.hapi.fhir:org.hl7.fhir.dstu2016may MAVEN version 5.3.5 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:org.hl7.fhir.dstu2016may and may be impacted: - ca.uhn.hapi.fhir:org.hl7.fhir.convertors 5.3.5 -...

ca.uhn.hapi.fhir:hapi-fhir-base-test-jaxrsserver-kotlin (>=5.7.7, <=5.7.9), ca.uhn.hapi.fhir:hapi-fhir-base-test-mindeps-client (>=5.7.7, <=5.7.9) +61 more potentially affected by CVE-2024-51132 via ca.uhn.hapi.fhir:org.hl7.fhir.dstu3 (5.6.27)

ca.uhn.hapi.fhir:org.hl7.fhir.dstu3 MAVEN version 5.6.27 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:org.hl7.fhir.dstu3 and may be impacted: - ca.uhn.hapi.fhir:hapi-fhir-base-test-jaxrsserver-kotlin =5.7.7, =5.7.7, =5.7.7, =5.7.0,...

ca.uhn.hapi.fhir:org.hl7.fhir.convertors (5.5.10), ca.uhn.hapi.fhir:org.hl7.fhir.validation (5.5.10) potentially affected by CVE-2024-51132 via ca.uhn.hapi.fhir:org.hl7.fhir.dstu3 (5.5.10)

ca.uhn.hapi.fhir:org.hl7.fhir.dstu3 MAVEN version 5.5.10 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:org.hl7.fhir.dstu3 and may be impacted: - ca.uhn.hapi.fhir:org.hl7.fhir.convertors 5.5.10 - ca.uhn.hapi.fhir:org.hl7.fhir.validati...

ca.uhn.hapi.fhir:org.hl7.fhir.convertors (5.5.14), ca.uhn.hapi.fhir:org.hl7.fhir.validation (5.5.14) potentially affected by CVE-2024-51132 via ca.uhn.hapi.fhir:org.hl7.fhir.dstu3 (5.5.14)

ca.uhn.hapi.fhir:org.hl7.fhir.dstu3 MAVEN version 5.5.14 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:org.hl7.fhir.dstu3 and may be impacted: - ca.uhn.hapi.fhir:org.hl7.fhir.convertors 5.5.14 - ca.uhn.hapi.fhir:org.hl7.fhir.validati...

ca.uhn.hapi.fhir:org.hl7.fhir.convertors (5.6.0), ca.uhn.hapi.fhir:org.hl7.fhir.validation (5.6.0) potentially affected by CVE-2024-51132 via ca.uhn.hapi.fhir:org.hl7.fhir.dstu3 (5.6.0)

ca.uhn.hapi.fhir:org.hl7.fhir.dstu3 MAVEN version 5.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:org.hl7.fhir.dstu3 and may be impacted: - ca.uhn.hapi.fhir:org.hl7.fhir.convertors 5.6.0 - ca.uhn.hapi.fhir:org.hl7.fhir.validation...

ca.uhn.hapi.fhir:hapi-fhir-base-test-jaxrsserver-kotlin (>=6.0.3, <=6.1.3), ca.uhn.hapi.fhir:hapi-fhir-base-test-mindeps-client (>=6.0.3, <=6.1.3) +77 more potentially affected by CVE-2024-51132 via ca.uhn.hapi.fhir:org.hl7.fhir.dstu3 (5.6.36)

ca.uhn.hapi.fhir:org.hl7.fhir.dstu3 MAVEN version 5.6.36 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:org.hl7.fhir.dstu3 and may be impacted: - ca.uhn.hapi.fhir:hapi-fhir-base-test-jaxrsserver-kotlin =6.0.3, =6.0.3, =6.0.3, =6.0.0,...

ca.uhn.hapi.fhir:org.hl7.fhir.convertors (5.3.9), ca.uhn.hapi.fhir:org.hl7.fhir.validation (5.3.9) potentially affected by CVE-2024-51132 via ca.uhn.hapi.fhir:org.hl7.fhir.dstu3 (5.3.9)

ca.uhn.hapi.fhir:org.hl7.fhir.dstu3 MAVEN version 5.3.9 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:org.hl7.fhir.dstu3 and may be impacted: - ca.uhn.hapi.fhir:org.hl7.fhir.convertors 5.3.9 - ca.uhn.hapi.fhir:org.hl7.fhir.validation...

ca.uhn.hapi.fhir:org.hl7.fhir.convertors (5.3.14), ca.uhn.hapi.fhir:org.hl7.fhir.validation (5.3.14) potentially affected by CVE-2024-51132 via ca.uhn.hapi.fhir:org.hl7.fhir.dstu3 (5.3.14)

ca.uhn.hapi.fhir:org.hl7.fhir.dstu3 MAVEN version 5.3.14 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:org.hl7.fhir.dstu3 and may be impacted: - ca.uhn.hapi.fhir:org.hl7.fhir.convertors 5.3.14 - ca.uhn.hapi.fhir:org.hl7.fhir.validati...

ca.uhn.hapi.fhir:org.hl7.fhir.convertors (5.3.10), ca.uhn.hapi.fhir:org.hl7.fhir.validation (5.3.10) potentially affected by CVE-2024-51132 via ca.uhn.hapi.fhir:org.hl7.fhir.dstu3 (5.3.10)

ca.uhn.hapi.fhir:org.hl7.fhir.dstu3 MAVEN version 5.3.10 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:org.hl7.fhir.dstu3 and may be impacted: - ca.uhn.hapi.fhir:org.hl7.fhir.convertors 5.3.10 - ca.uhn.hapi.fhir:org.hl7.fhir.validati...

ca.uhn.hapi.fhir:org.hl7.fhir.convertors (5.3.11), ca.uhn.hapi.fhir:org.hl7.fhir.validation (5.3.11) potentially affected by CVE-2024-51132 via ca.uhn.hapi.fhir:org.hl7.fhir.dstu3 (5.3.11)

ca.uhn.hapi.fhir:org.hl7.fhir.dstu3 MAVEN version 5.3.11 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:org.hl7.fhir.dstu3 and may be impacted: - ca.uhn.hapi.fhir:org.hl7.fhir.convertors 5.3.11 - ca.uhn.hapi.fhir:org.hl7.fhir.validati...

ca.uhn.hapi.fhir:org.hl7.fhir.convertors (5.3.12), ca.uhn.hapi.fhir:org.hl7.fhir.validation (5.3.12) potentially affected by CVE-2024-51132 via ca.uhn.hapi.fhir:org.hl7.fhir.dstu3 (5.3.12)

ca.uhn.hapi.fhir:org.hl7.fhir.dstu3 MAVEN version 5.3.12 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:org.hl7.fhir.dstu3 and may be impacted: - ca.uhn.hapi.fhir:org.hl7.fhir.convertors 5.3.12 - ca.uhn.hapi.fhir:org.hl7.fhir.validati...