https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T21:15:31.273929+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-55272 EUVD-2026-55272 2026-10-06T21:15:31.276689+00:00 EUVD-2026-55272 https://cve.radiocsirt.org/vuln/fkie_cve-2019-12741 fkie_cve-2019-12741 2026-10-06T21:15:31.276730+00:00

XSS exists in the HAPI FHIR testpage overlay module of the HAPI FHIR library before 3.8.0. The attack involves unsanitized HTTP parameters being output in a form page, allowing attackers to leak cookies and other sensitive information from ca/uhn/fhir/to/BaseController.java via a specially crafted URL. (This module is not generally used in production systems so the attack surface is expected to be low, but affected systems are recommended to upgrade immediately.)

 https://cve.radiocsirt.org/vuln/ghsa-52mh-p2m2-w625 GHSA-52mh-p2m2-w625 — Cross-site Scripting in HAPI FHIR 2026-10-06T21:15:31.276764+00:00

Affected: Maven: ca.uhn.hapi.fhir:hapi-fhir-base

XSS exists in the HAPI FHIR testpage overlay module of the HAPI FHIR library before 3.8.0. The attack involves unsanitized HTTP parameters being output in a form page, allowing attackers to leak cookies and other sensitive information from ca/uhn/fhir/to/BaseController.java via a specially crafted URL. (This module is not generally used in production systems so the attack surface is expected to be low, but affected systems are recommended to upgrade immediately.)

 https://cve.radiocsirt.org/vuln/gsd-2019-12741 gsd-2019-12741 2026-10-06T21:15:31.276790+00:00 gsd-2019-12741