Maven/ca.uhn.hapi.fhir:org.hl7.fhir.validation CVE-2026-49485: high 7.5
org.hl7.fhir.core: ReDoS via FHIRPath matches()/replaceMatches() in FHIR Validator HTTP Endpoint
Action: Upgrade ca.uhn.hapi.fhir:org.hl7.fhir.validation to the fixed version for your line (see fixed_versions).
Affected
| introduced | fixed | last affected |
|---|---|---|
| 6.9.5 | 6.9.9 | - |
| 0 | 6.9.4.2 | - |
Fixed versions
| 6.9.9 | 6.9.4.2 |
Sources
- osv: GHSA-7cmj-v6x8-frvv#Maven/ca.uhn.hapi.fhir:org.hl7.fhir.validation
- https://github.com/hapifhir/org.hl7.fhir.core/security/advisories/GHSA-7cmj-v6x8-frvv
- https://github.com/hapifhir/org.hl7.fhir.core
CVE-2026-49485 · published · modified · JSON