Vulnerabilities in hapifhir
6 resultsCVE-2024-45294HIGH`org.hl7.fhir.core` XXE vulnerability in XSLT transformsEPSS 1.0%CVE-2024-52007HIGHXXE vulnerability in XSLT parsing in `org.hl7.fhir.core`EPSS 0.9%CVE-2026-34361CRITICALHAPI FHIR: Unauthenticated SSRF via /loadIG Chains with startsWith() Credential Leak for Authentication Token TheftEPSS 0.3%CVE-2026-33180HIGHHAPI FHIR HTTP authentication leak in redirectsEPSS 0.2%CVE-2026-34360MEDIUMHAPI FHIR: Unauthenticated Blind SSRF via /loadIG Endpoint Enables Internal Network ProbingEPSS 0.2%CVE-2026-34359HIGHHAPI FHIR: Authentication Credential Leakage via Improper URL Prefix Matching on HTTP Redirect in HAPI FHIR CoreEPSS 0.2%