Product by Hapifhir
Ca.uhn.hapi.fhir:org.hl7.fhir.validation.cli
9 known vulnerabilities in Ca.uhn.hapi.fhir:org.hl7.fhir.validation.cli (Hapifhir), 0 of them actively exploited (CISA KEV).
Key figures
9
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
0
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2026-81876 | HAPI FHIR: SHCParser DEFLATE infinite loop causes denial of service | 7.5 | |
| High | CVE-2026-81875 | HAPI FHIR: SHCParser unbounded DEFLATE decompression causes denial of service | 7.5 | |
| High | CVE-2026-49485 | HAPI FHIR: ReDoS via FHIRPath matches()/replaceMatches() in FHIR Validator HTTP Endpoint | 7.5 | |
| High | CVE-2026-45367 | HAPI FHIR: ReDoS via FHIRPath matches()/replaceMatches() in FHIR Validator HTTP Endpoint | 7.5 | |
| High | CVE-2026-55470 | HAPI FHIR: DSTU2 FHIRPathEngine.matches() missing RegexTimeout protection allows ReDoS | 7.5 | |
| High | CVE-2026-62295 | HAPI FHIR: JSON utility parser unbounded recursion causes StackOverflow denial of service | 7.5 | |
| High | CVE-2026-62296 | HAPI FHIR: XHTML narrative parser unbounded recursion causes StackOverflow denial of service | 7.5 | |
| High | CVE-2026-33180 | HAPI FHIR HTTP authentication leak in redirects | 7.5 | |
| Medium | CVE-2026-62293 | HAPI FHIR: Stored XSS in scan report via unescaped IG and profile titles | 5.0 |