ca.uhn.hapi.fhir:hapi-fhir-docs (>=6.4.0, <=6.8.8), ca.uhn.hapi.fhir:hapi-fhir-jpaserver-elastic-test-utilities (>=6.4.0, <=6.8.8) +44 more potentially affected by CVE-2023-26119 via net.sourceforge.htmlunit:htmlunit (2.67.0)

net.sourceforge.htmlunit:htmlunit MAVEN version 2.67.0 is affected by a known vulnerability. The following packages have a transitive dependency on net.sourceforge.htmlunit:htmlunit and may be impacted: - ca.uhn.hapi.fhir:hapi-fhir-docs =6.4.0, =6.4.0, =6.4.0, =6.6.0, =6.4.0, =6.4.0, =2022.12.10,...

ca.uhn.hapi.fhir:hapi-fhir-docs (>=5.4.0, <=5.6.5), ca.uhn.hapi.fhir:hapi-fhir-jpaserver-test-utilities (>=5.4.0, <=5.6.5) +32 more potentially affected by CVE-2023-26119 via net.sourceforge.htmlunit:htmlunit (2.49.1)

net.sourceforge.htmlunit:htmlunit MAVEN version 2.49.1 is affected by a known vulnerability. The following packages have a transitive dependency on net.sourceforge.htmlunit:htmlunit and may be impacted: - ca.uhn.hapi.fhir:hapi-fhir-docs =5.4.0, =5.4.0, =5.4.0, =5.4.0, =3.0.0, =0.0.3, =0-snaphot,...

ca.uhn.hapi.fhir:hapi-fhir-docs (>=6.0.0, <=6.1.3), ca.uhn.hapi.fhir:hapi-fhir-jpaserver-test-utilities (>=6.0.0, <=6.1.3) +44 more potentially affected by CVE-2023-26119 via net.sourceforge.htmlunit:htmlunit (2.58.0)

net.sourceforge.htmlunit:htmlunit MAVEN version 2.58.0 is affected by a known vulnerability. The following packages have a transitive dependency on net.sourceforge.htmlunit:htmlunit and may be impacted: - ca.uhn.hapi.fhir:hapi-fhir-docs =6.0.0, =6.0.0, =6.0.3, =6.0.0, =6.0.0, =6.0.0, =1.0.57,...

ca.uhn.hapi.fhir:hapi-fhir-docs (>=5.7.0, <=5.7.9), ca.uhn.hapi.fhir:hapi-fhir-jpaserver-test-utilities (>=5.7.0, <=5.7.9) +54 more potentially affected by CVE-2023-26119 via net.sourceforge.htmlunit:htmlunit (2.56.0)

net.sourceforge.htmlunit:htmlunit MAVEN version 2.56.0 is affected by a known vulnerability. The following packages have a transitive dependency on net.sourceforge.htmlunit:htmlunit and may be impacted: - ca.uhn.hapi.fhir:hapi-fhir-docs =5.7.0, =5.7.0, =5.7.7, =5.7.0, =5.7.0, =4.6.19.ayg,...

ca.uhn.hapi.fhir:hapi-fhir-spring-boot-sample-client-apache (6.6.0), ca.uhn.hapi.fhir:hapi-fhir-spring-boot-sample-client-okhttp (6.6.0) +440 more potentially affected by CVE-2023-34981 via org.apache.tomcat.embed:tomcat-embed-core (9.0.74)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 9.0.74 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - ca.uhn.hapi.fhir:hapi-fhir-spring-boot-sample-client-apache 6.6.0 -...

ca.uhn.hapi.fhir:hapi-fhir-cli-api (3.4.0), ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base (>=3.0.0, <=3.4.0) +1617 more potentially affected by CVE-2023-20863 via org.springframework:spring-expression (4.3.10.release)

org.springframework:spring-expression MAVEN version 4.3.10.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-expression and may be impacted: - ca.uhn.hapi.fhir:hapi-fhir-cli-api 3.4.0 -...

ca.uhn.hapi.fhir:hapi-fhir-cli-api (>=6.0.0, <=6.2.5), ca.uhn.hapi.fhir:hapi-fhir-cli-app (>=6.0.3, <=6.2.5) +822 more potentially affected by CVE-2023-28867 via com.graphql-java:graphql-java (>=1.3, <=17.4)

com.graphql-java:graphql-java MAVEN version =1.3, =6.0.0, =6.0.3, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.2.0, =6.0.0, =6.0.0, =6.0.3, =0.1.0, =1.0.0, =2.8.5, =1.3.0, =1.1.0, =2.27.0 and more Source cves: CVE-2023-28867 Source advisory: GHSA-P4QX-6W5P-4RJ2...

ca.uhn.hapi.fhir:hapi-fhir-cli-api (>=6.4.0, <=6.4.7), ca.uhn.hapi.fhir:hapi-fhir-cli-app (>=6.4.0, <=6.4.7) +325 more potentially affected by CVE-2023-28867 via com.graphql-java:graphql-java (>=19.0, <=19.3)

com.graphql-java:graphql-java MAVEN version =19.0, =6.4.0, =6.4.0, =6.4.0, =6.4.0, =6.4.0, =6.4.0, =6.4.0, =6.4.0, =6.4.0, =2.0.4, =14.3.0, =17.5.0 - com.datasqrl:sqrl-base 0.6.0 - com.datasqrl:sqrl-calcite 0.6.0 and more Source cves: CVE-2023-28867 Source advisory: OSV:GHSA-P4QX-6W5P-4RJ2...

ca.uhn.hapi.fhir:hapi-fhir-cli-api (>=6.4.0, <=6.4.7), ca.uhn.hapi.fhir:hapi-fhir-cli-app (>=6.4.0, <=6.4.7) +325 more potentially affected by CVE-2023-28867 via com.graphql-java:graphql-java (>=19.0, <=19.3)

com.graphql-java:graphql-java MAVEN version =19.0, =6.4.0, =6.4.0, =6.4.0, =6.4.0, =6.4.0, =6.4.0, =6.4.0, =6.4.0, =6.4.0, =2.0.4, =14.3.0, =17.5.0 - com.datasqrl:sqrl-base 0.6.0 - com.datasqrl:sqrl-calcite 0.6.0 and more Source cves: CVE-2023-28867 Source advisory: GHSA-P4QX-6W5P-4RJ2...

ca.uhn.hapi.fhir:hapi-fhir-cli-api (>=6.0.0, <=6.2.5), ca.uhn.hapi.fhir:hapi-fhir-cli-app (>=6.0.3, <=6.2.5) +822 more potentially affected by CVE-2023-28867 via com.graphql-java:graphql-java (>=1.3, <=17.4)

com.graphql-java:graphql-java MAVEN version =1.3, =6.0.0, =6.0.3, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.2.0, =6.0.0, =6.0.0, =6.0.3, =0.1.0, =1.0.0, =2.8.5, =1.3.0, =1.1.0, =2.27.0 and more Source cves: CVE-2023-28867 Source advisory: OSV:GHSA-P4QX-6W5P-4RJ2...

ca.uhn.hapi.fhir:hapi-fhir-cli-api (>=6.4.0, <=6.4.7), ca.uhn.hapi.fhir:hapi-fhir-cli-app (>=6.4.0, <=6.4.7) +325 more potentially affected by CVE-2023-28867 via com.graphql-java:graphql-java (>=19.0, <=19.3)

com.graphql-java:graphql-java MAVEN version =19.0, =6.4.0, =6.4.0, =6.4.0, =6.4.0, =6.4.0, =6.4.0, =6.4.0, =6.4.0, =6.4.0, =2.0.4, =14.3.0, =17.5.0 - com.datasqrl:sqrl-base 0.6.0 - com.datasqrl:sqrl-calcite 0.6.0 and more Source cves: CVE-2023-28867 Source advisory: MEND:CVE-2023-28867...

ca.uhn.hapi.fhir:hapi-fhir-cli-api (>=6.0.0, <=6.2.5), ca.uhn.hapi.fhir:hapi-fhir-cli-app (>=6.0.3, <=6.2.5) +822 more potentially affected by CVE-2023-28867 via com.graphql-java:graphql-java (>=1.3, <=17.4)

com.graphql-java:graphql-java MAVEN version =1.3, =6.0.0, =6.0.3, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.2.0, =6.0.0, =6.0.0, =6.0.3, =0.1.0, =1.0.0, =2.8.5, =1.3.0, =1.1.0, =2.27.0 and more Source cves: CVE-2023-28867 Source advisory: MEND:CVE-2023-28867...

ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base (>=2.0, <=2.2), ca.uhn.hapi.fhir:hapi-fhir-testpage-overlay (>=2.0, <=2.2) +348 more potentially affected by CVE-2023-20861 via org.springframework:spring-expression (4.3.1.release)

org.springframework:spring-expression MAVEN version 4.3.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-expression and may be impacted: - ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base =2.0, =2.0, =2.0, =2.1.0-release,...

ca.uhn.hapi.fhir:hapi-fhir-cli-api (3.4.0), ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base (>=3.0.0, <=3.4.0) +1617 more potentially affected by CVE-2023-20861 via org.springframework:spring-expression (4.3.10.release)

org.springframework:spring-expression MAVEN version 4.3.10.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-expression and may be impacted: - ca.uhn.hapi.fhir:hapi-fhir-cli-api 3.4.0 -...

ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base (1.6), ca.uhn.hapi.fhir:hapi-fhir-testpage-overlay (1.6) +166 more potentially affected by CVE-2023-20861 via org.springframework:spring-expression (4.3.0.release)

org.springframework:spring-expression MAVEN version 4.3.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-expression and may be impacted: - ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base 1.6 -...

ca.uhn.hapi.fhir:org.hl7.fhir.convertors (0.0.2), ca.uhn.hapi.fhir:org.hl7.fhir.validation (0.0.2) potentially affected by CVE-2023-28465 via ca.uhn.hapi.fhir:org.hl7.fhir.r5 (0.0.2)

ca.uhn.hapi.fhir:org.hl7.fhir.r5 MAVEN version 0.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:org.hl7.fhir.r5 and may be impacted: - ca.uhn.hapi.fhir:org.hl7.fhir.convertors 0.0.2 - ca.uhn.hapi.fhir:org.hl7.fhir.validation 0.0.2...

ca.uhn.hapi.fhir:org.hl7.fhir.convertors (4.0.1), ca.uhn.hapi.fhir:org.hl7.fhir.dstu2 (4.0.1) +6 more potentially affected by CVE-2023-28465 via ca.uhn.hapi.fhir:org.hl7.fhir.utilities (4.0.1)

ca.uhn.hapi.fhir:org.hl7.fhir.utilities MAVEN version 4.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:org.hl7.fhir.utilities and may be impacted: - ca.uhn.hapi.fhir:org.hl7.fhir.convertors 4.0.1 -...

ca.uhn.hapi.fhir:hapi-fhir-cli-api (>=5.0.0, <=6.4.1), ca.uhn.hapi.fhir:hapi-fhir-cli-app (>=5.6.5, <=6.4.1) +131 more potentially affected by CVE-2023-28465 via ca.uhn.hapi.fhir:org.hl7.fhir.convertors (>=5.0.0, <=5.6.105)

ca.uhn.hapi.fhir:org.hl7.fhir.convertors MAVEN version =5.0.0, =5.0.0, =5.6.5, =5.0.0, =5.0.0, =5.0.0, =5.0.0, =5.0.0, =5.0.0, =5.3.0, =6.2.0, =5.1.0, =5.3.0, =5.0.0, =5.0.0, =6.4.1 and more Source cves: CVE-2023-28465 Source advisory: OSV:GHSA-9654-PR4F-GH6M...

ca.uhn.hapi.fhir:org.hl7.fhir.convertors (0.1.18), ca.uhn.hapi.fhir:org.hl7.fhir.dstu2 (0.1.18) +5 more potentially affected by CVE-2023-28465 via ca.uhn.hapi.fhir:org.hl7.fhir.utilities (0.1.18)

ca.uhn.hapi.fhir:org.hl7.fhir.utilities MAVEN version 0.1.18 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:org.hl7.fhir.utilities and may be impacted: - ca.uhn.hapi.fhir:org.hl7.fhir.convertors 0.1.18 -...

ca.uhn.hapi.fhir:hapi-fhir-cli-api (>=5.0.0, <=6.4.1), ca.uhn.hapi.fhir:hapi-fhir-cli-app (>=5.6.5, <=6.4.1) +154 more potentially affected by CVE-2023-24057 +1 more via ca.uhn.hapi.fhir:org.hl7.fhir.r5 (>=5.0.0, <=5.6.105)

ca.uhn.hapi.fhir:org.hl7.fhir.r5 MAVEN version =5.0.0, =5.0.0, =5.6.5, =5.0.0, =5.0.0, =5.0.0, =5.0.0, =5.0.0, =5.0.0, =5.3.0, =6.2.0, =5.1.0, =5.3.0, =5.0.0, =5.0.0, =6.4.1 and more Source cves: CVE-2023-24057, CVE-2023-28465 Source advisory: GHSA-9654-PR4F-GH6M...