Advisories · Technology
hapifhir org.hl7.fhir.core.
Every CVE that names hapifhir org.hl7.fhir.core among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.5 High
HAPI FHIR: XHTML narrative parser unbounded recursion causes StackOverflow denial of service
- hapifhir org.hl7.fhir.core
- hapifhir ca.uhn.hapi.fhir:org.hl7.fhir.r5
- Denial of service
- CWE-20
- CVSS 7.5 High
HAPI FHIR: JSON utility parser unbounded recursion causes StackOverflow denial of service
- hapifhir org.hl7.fhir.core
- hapifhir ca.uhn.hapi.fhir:org.hl7.fhir.r5
- Denial of service
- CWE-20
- CVSS 5.0 Medium
HAPI FHIR: Stored XSS in scan report via unescaped IG and profile titles
- hapifhir org.hl7.fhir.core
- hapifhir ca.uhn.hapi.fhir:org.hl7.fhir.validation
- Cross-site scripting (XSS)
- CWE-20