dev.dsf
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| dsf-bpe-server | 2 | – | Apr 21, 2026 |
| dsf-bpe-process-api-v2 | 1 | – | Apr 21, 2026 |
| dsf-common-jetty | 1 | – | Apr 21, 2026 |
| dsf-fhir-server | 1 | – | Apr 21, 2026 |
Exploited and recent CVEs
- CVE-2026-40942 DSF: Inverted Time Comparison in OIDC JWKS and Token Cache 0.3%
- CVE-2026-40942 DSF: Inverted Time Comparison in OIDC JWKS and Token Cache 0.3%
- CVE-2026-40939 DSF: Missing Session Timeout for OIDC Sessions 0.2%
- CVE-2026-40939 DSF: Missing Session Timeout for OIDC Sessions 0.2%
- CVE-2026-40939 DSF: Missing Session Timeout for OIDC Sessions 0.2%