Beveiligingsadvies

CVE-2026-45367

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-07-16 16:52:04

Laatst bijgewerkt 2026-07-18 03:00:14

Toegewezen door GitHub_M

CVSS-score 7.5

Status PUBLISHED

Beschrijving

HAPI FHIR is a complete implementation of the HL7 FHIR standard for healthcare interoperability in Java. Prior to 6.9.7, the FHIRPathEngine implementation passes user-controlled regular expressions from matches(), matchesFull(), and replaceMatches() to Java regex operations without effective timeouts, allowing catastrophic backtracking and denial of service. This issue is fixed in version 6.9.7.

← Alle CVE's bekijken Bekijk op cve.org ↗