CVE-2026-113873
CVE-2026-113873 · SmileCDR HAPI FHIR improper data decompression
This page contains facts from public vulnerability sources. Check the original advisory before updating.
SmileCDR HAPI FHIR does not properly handle highly compressed data, allowing an unauthenticated attacker to send compressed payloads that exhaust server heap or crash certain services when decompressed.
CVSS 8.7 · High · EPSS 0.5%
- Published
- Updated
Affected products and versions
hapi fhir
- Versions
- ≥ 0: Affected (custom)
No fix published