ca.uhn.hapi.fhir:org.hl7.fhir.r4 vulnerabilities

CVEs whose affected-version data names the ca.uhn.hapi.fhir:org.hl7.fhir.r4 package (maven). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-49485High· 7.5

org.hl7.fhir.core: ReDoS via FHIRPath matches()/replaceMatches() in FHIR Validator HTTP Endpoint

org.hl7.fhir.core: ReDoS via FHIRPath matches()/replaceMatches() in FHIR Validator HTTP Endpoint

▾ Twilightuhn · ca.uhn.hapi.fhir:org.hl7.fhir.dstu2EPSS 0.68%via GHSA

ca.uhn.hapi.fhir:org.hl7.fhir.r4 vulnerabilities (CVEs) · VulnSea