ca.uhn.hapi.fhir:org.hl7.fhir.convertors vulnerabilities

CVEs whose affected-version data names the ca.uhn.hapi.fhir:org.hl7.fhir.convertors package (maven). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-55470High· 7.5

HAPI FHIR: Incomplete fix for CVE-2026-45367: DSTU2 FHIRPathEngine.matches() missing RegexTimeout protection allows ReDoS

HAPI FHIR: Incomplete fix for CVE-2026-45367: DSTU2 FHIRPathEngine.matches() missing RegexTimeout protection allows ReDoS

▾ Twilightuhn · ca.uhn.hapi.fhir:org.hl7.fhir.dstu2EPSS 0.68%via GHSA

ca.uhn.hapi.fhir:org.hl7.fhir.convertors vulnerabilities (CVEs) · VulnSea