Maven/org.hl7.fhir.publisher:org.hl7.fhir.publisher CVE-2023-24057: critical 9.1, EPSS 1.18%
MITM based Zip Slip in `org.hl7.fhir.publisher:org.hl7.fhir.publisher`
Action: Upgrade org.hl7.fhir.publisher:org.hl7.fhir.publisher to 1.2.30 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.2.30 | - |
Fixed versions
| 1.2.30 |
Sources
- osv: GHSA-xr8x-pxm6-prjg
- https://github.com/HL7/fhir-ig-publisher/security/advisories/GHSA-xr8x-pxm6-prjg
- https://github.com/HL7/fhir-ig-publisher
CVE-2023-24057 · published · modified · JSON