Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

hapifhir/hapi-fhir

              master @ 1901adf
            

100

Fixes

CVEs

HIGH

Peak severity

34.2%

Coverage

Highlights

Auth Bypass: 53 prior fixes. Scrutinize any change in this area.

hapi-fhir-server/src/main/java/ca/uhn/fhir/rest/server/interceptor/auth/RuleImplOp.java: most-fixed (7 issues). Treat as high-risk during review.

78 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Auth Bypass: Recurring flaws in rule matching (operation type, applies-to type, classifier), compartment handling, and operation direction (IN/OUT) allow unauthorized access to resources, especially in transactions, bulk export, and PATCH/DELETE paths.

Partition/Isolation Bypass: Multiple fixes address missing partition ID in cache keys, queries, and reads, leading to cross-tenant data exposure across search, history, subscriptions, MDM expansion, and reference resolution.

Authorization Bypass in Bulk Export: Bulk export paths repeatedly missed authorization checks: patient/group ID filters, type filters, compartment matchers, and consent pointcuts. Each fix closes a specific gap, indicating the export surface is broad and complex.