Skip to content
OpenAdvisories

Product · dev.dsf

dsf-bpe-process-api-v2

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.3
    CVE-2026-40942

    DSF: Inverted Time Comparison in OIDC JWKS and Token Cache

    The Data Sharing Framework (DSF) implements a distributed process engine based on the BPMN 2.0 and FHIR R4 standards. Prior to 2.1.0, The OIDC JWKS and Metadata Document caches used an inverted time comparison (isBefore instead of isAfter), causing the cache …

    datasharingframework dev.dsf dsf dsf-bpe-server Maven