CVE-2026-55471

CRITICAL SEVERITY

Vulnerability Description

HAPI FHIR: XXE in XsltUtilities.saxonTransform via unhardened Saxon TransformerFactory

Published Date

June 17, 2026

Last Modified

June 17, 2026

Source

GitHub

Vendor

maven

Product

ca.uhn.hapi.fhir:org.hl7.fhir.utilities