CVE Intelligence

Vulnerabilidades do Dev.dsf Dsf-fhir-server

🔔 Criar alerta RSS Verificador de versão

CVEs publicadas que afetam Dev.dsf Dsf-fhir-server: 1 registro(s), com versões afetadas e correções.

CVE-2026-40939 Média · 6.8 CWE-613 21/04/2026
DSF: Missing Session Timeout for OIDC Sessions
The Data Sharing Framework (DSF) implements a distributed process engine based on the BPMN 2.0 and FHIR R4 standards. Prior to 2.1.0, OIDC-authenticated sessions had no configured maximum inactivity timeout. Sessions persisted indefinitely after login, even after the OIDC access token expired. This vulnerability is fixed in 2.1.0.