All issues

Search results

ValueSet pre-expansion runs on a node that has not stored the terminology (deferred concepts are node-local)

Status: Open.

#8354 In hapifhir/hapi-fhir;

· codeforgreen opened on Sep 5, 2026

Storing a CodeSystem with a core canonical URL overrides built-in terminology in instance validation, despite allowDatabaseValidationOverride=false

Status: Open.

#8350 In hapifhir/hapi-fhir;

· ttnTrifork opened on Sep 3, 2026

WorkerContextValidationSupportAdapter reports no batch-validation support for every code system, so validators silently skip codes

Status: Open.

#8348 In hapifhir/hapi-fhir;

· jimsteel opened on Sep 3, 2026

CVE-2026-83557 (Medium) detected in jackson-databind-2.20.0.jar

Mend: dependency security vulnerabilitySecurity vulnerability detected by WhiteSourceSecurity vulnerability detected by WhiteSource

Status: Open.

#8347 In hapifhir/hapi-fhir;

· mend-bolt-for-github opened on Sep 2, 2026

CodeableConcept validation requires ALL codings to be in the bound ValueSet, spec requires only one

Status: Open.

#8345 In hapifhir/hapi-fhir;

· patrick-werner opened on Sep 2, 2026

Patient $hapi.fhir.merge operation mangles authorReference, valueReference fields

Status: Open.

#8344 In hapifhir/hapi-fhir;

· sandy-wright opened on Sep 1, 2026

MDM - A source resource whose EID has a system but no value matches every resource in that EID system

Status: Open.

#8343 In hapifhir/hapi-fhir;

· jmarchionatto opened on Sep 1, 2026

Update MDM to allow handling of too many matching candidates without failing

Status: Open.

#8342 In hapifhir/hapi-fhir;

· TipzCM opened on Sep 1, 2026

CVE-2026-17615 (High) detected in resteasy-core-6.2.10.Final.jar

Mend: dependency security vulnerabilitySecurity vulnerability detected by WhiteSourceSecurity vulnerability detected by WhiteSource

Status: Open.

#8340 In hapifhir/hapi-fhir;

· mend-bolt-for-github opened on Sep 1, 2026

CVE-2026-19032 (Medium) detected in jackson-databind-2.20.0.jar

Mend: dependency security vulnerabilitySecurity vulnerability detected by WhiteSourceSecurity vulnerability detected by WhiteSource

Status: Open.

#8339 In hapifhir/hapi-fhir;

· mend-bolt-for-github opened on Sep 1, 2026

CVE-2026-82596 (Low) detected in LatencyUtils-2.0.3.jar

Mend: dependency security vulnerabilitySecurity vulnerability detected by WhiteSourceSecurity vulnerability detected by WhiteSource

Status: Open.

#8333 In hapifhir/hapi-fhir;

· mend-bolt-for-github opened on Aug 31, 2026

Bulk exports return originalRequestUrl which can leak internal URLs

Status: Open.

#8331 In hapifhir/hapi-fhir;

· steveswinsburg opened on Aug 31, 2026