Threats tagged 'ghsa-3w98-rrpr-fprr'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	7.5	EPSS 0.6%	CVE-2026-81875hapifhir org.hl7.fhir.core · Improper Input Validation High7.5EPSS 0.6%2026-09-16CVE Database V5CVE-2026-81875 CVE-2026-81875 is a high-severity vulnerability in HAPI FHIR's org.hl7.fhir.core component prior to version 6.9.12. The SHCParser improperly validates input when decompressing Smart Health Card JWT content with a 'zip' header set to 'DEF'. This leads to unbounded memory allocation during decompression, potentially causing excessive heap usage, severe garbage collection pressure, request failures, or process crashes. The issue is fixed in version 6.9.12. EPSS 0.6%Vulnerability CWE-20 #ghsa-3w98-rrpr-fprr #maven	CVE Database V5	2026-09-16

Page 1 of 1