Skip to content
OpenAdvisories

Vendor

datasharingframework

2 known vulnerabilities.

Products

dsf 2
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.3
    CVE-2026-40942

    DSF: Inverted Time Comparison in OIDC JWKS and Token Cache

    The Data Sharing Framework (DSF) implements a distributed process engine based on the BPMN 2.0 and FHIR R4 standards. Prior to 2.1.0, The OIDC JWKS and Metadata Document caches used an inverted time comparison (isBefore instead of isAfter), causing the cache …

    datasharingframework dev.dsf dsf dsf-bpe-server Maven
  • Medium 6.8
    CVE-2026-40939

    DSF: Missing Session Timeout for OIDC Sessions

    The Data Sharing Framework (DSF) implements a distributed process engine based on the BPMN 2.0 and FHIR R4 standards. Prior to 2.1.0, OIDC-authenticated sessions had no configured maximum inactivity timeout. Sessions persisted indefinitely after login, even a…

    datasharingframework dev.dsf dsf dsf-bpe-server Maven