org.hl7.fhir.core vulnerabilities

CVEs whose affected-version data names the org.hl7.fhir.core package (maven). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

3 CVEsRSS

CVE-2026-81875High· 7.5PoC

6d ago

HAPI FHIR is a complete implementation of the HL7 FHIR standard for healthcare interoperability in Java

HAPI FHIR is a complete implementation of the HL7 FHIR standard for healthcare interoperability in Java. Prior to version 6.9.12, SHCParser in org.hl7.fhir.r5/src/main/java/org/hl7/fhir/r5/elementmodel/SHCParser.java can consume attacker…

▾ Midnighthapifhir · org.hl7.fhir.coreEPSS 0.63%via NVD

CVE-2026-81876High· 7.5

6d ago

HAPI FHIR is a complete implementation of the HL7 FHIR standard for healthcare interoperability in Java

▾ Twilighthapifhir · org.hl7.fhir.coreEPSS 0.63%via NVD

CVE-2026-62295High· 7.5PoC

1mo ago

HAPI FHIR is a complete implementation of the HL7 FHIR standard for healthcare interoperability in Java

HAPI FHIR is a complete implementation of the HL7 FHIR standard for healthcare interoperability in Java. Prior to 6.9.11, the JSON utility parser in org.hl7.fhir.utilities.json.parser.JsonParser enforces no maximum nesting depth for arra…

▾ Midnighthapifhir · org.hl7.fhir.coreEPSS 0.34%via NVD