Maven/ca.uhn.hapi.fhir:org.hl7.fhir.utilities CVE-2026-55471: critical 9.1, EPSS 0.57%
HAPI FHIR: XXE in XsltUtilities.saxonTransform via unhardened Saxon TransformerFactory
Action: Upgrade ca.uhn.hapi.fhir:org.hl7.fhir.utilities to 6.9.10 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 6.9.10 | - |
Fixed versions
| 6.9.10 |
Sources
- osv: GHSA-2f55-g35j-5jmf
- nvd: CVE-2026-55471
- https://github.com/hapifhir/org.hl7.fhir.core/security/advisories/GHSA-2f55-g35j-5jmf
- https://github.com/hapifhir/org.hl7.fhir.core
CVE-2026-55471 · published · modified · JSON