Search results

CVE-2026-22740 (Medium) detected in spring-web-6.2.12.jar

Mend: dependency security vulnerabilitySecurity vulnerability detected by WhiteSourceSecurity vulnerability detected by WhiteSource

Status: Open.

#7793 In hapifhir/hapi-fhir;

· mend-bolt-for-github opened on Apr 19, 2026

CVE-2026-22741 (Low) detected in spring-webmvc-6.2.12.jar

Mend: dependency security vulnerabilitySecurity vulnerability detected by WhiteSourceSecurity vulnerability detected by WhiteSource

Status: Open.

#7792 In hapifhir/hapi-fhir;

· mend-bolt-for-github opened on Apr 19, 2026

OpenTelemetry server spans: missing http.route, high-cardinality names, exceptions not recorded on root span

Status: Open.

#7790 In hapifhir/hapi-fhir;

· pabitrahaldar1 opened on Apr 17, 2026

Topic Subscriptions break through partition boundaries

Status: Open.

#7787 In hapifhir/hapi-fhir;

· another-luis opened on Apr 17, 2026

CVE-2026-40478 (Critical) detected in thymeleaf-spring6-3.1.2.RELEASE.jar, thymeleaf-3.1.2.RELEASE.jar

Mend: dependency security vulnerabilitySecurity vulnerability detected by WhiteSourceSecurity vulnerability detected by WhiteSource

Status: Open.

#7786 In hapifhir/hapi-fhir;

· mend-bolt-for-github opened on Apr 17, 2026

CVE-2026-40477 (Critical) detected in thymeleaf-spring6-3.1.2.RELEASE.jar, thymeleaf-3.1.2.RELEASE.jar

Mend: dependency security vulnerabilitySecurity vulnerability detected by WhiteSourceSecurity vulnerability detected by WhiteSource

Status: Open.

#7785 In hapifhir/hapi-fhir;

· mend-bolt-for-github opened on Apr 17, 2026

Incorrect search results for OR-search (comma-separated) with multiple prefixes

Status: Open.

#7780 In hapifhir/hapi-fhir;

· steffen-gemin opened on Apr 16, 2026

auto-version-references-at-path bypasses cross-partition reference validation when CrossPartitionReferenceMode=NOT_ALLOWED

Status: Open.

#7777 In hapifhir/hapi-fhir;

· another-luis opened on Apr 15, 2026

CVE-2026-2332 (High) detected in jetty-http-12.0.32.jar

Mend: dependency security vulnerabilitySecurity vulnerability detected by WhiteSourceSecurity vulnerability detected by WhiteSource

Status: Open.

#7776 In hapifhir/hapi-fhir;

· mend-bolt-for-github opened on Apr 15, 2026

Change default Provenance compartment policy to NON_UNIQUE_COMPARTMENT_IN_DEFAULT

Status: Open.

#7771 In hapifhir/hapi-fhir;

· mrdnctrk opened on Apr 14, 2026

Consent REJECT during bundle lead to DB inconsistencies — HFJ_RESOURCE row created without matching HFJ_RES_VER

Status: Open.

#7769 In hapifhir/hapi-fhir;

· another-luis opened on Apr 14, 2026

Validate expression type prefix against the base type during search parameter creation

Status: Open.

#7767 In hapifhir/hapi-fhir;

· YalingPeiS opened on Apr 13, 2026