org.hl7.fhir.publisher:org.hl7.fhir.publisher.core (Maven) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the Maven package org.hl7.fhir.publisher:org.hl7.fhir.publisher.core, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (2)

• CVE-2024-52807 — CVSS 8.6 (high): The HL7 FHIR IG publisher is a tool to take a set of inputs and create a standard FHIR IG. Prior to version 1.7.4, XSLT transforms…
• CVE-2025-24363 — CVSS 4.2 (medium): The HL7 FHIR IG publisher is a tool to take a set of inputs and create a standard FHIR IG. Prior to version 1.8.9, in CI contexts, the IG…