Description
SmileCDR HAPI FHIR does not properly handle highly compressed data, allowing an unauthenticated attacker to send compressed payloads that exhaust server heap or crash certain services when decompressed.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| SmileCDR | HAPI FHIR | — | — |
Advisories 1
- VA-26-294-01 HAPI FHIR CISA ICS & IT advisories · Oct 22, 2026