Skip to content

Product

dev.dsf/dsf-bpe-process-api-v2 vulnerabilities

1 published CVE affecting dev.dsf/dsf-bpe-process-api-v2, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
1
Critical
0
High
0
Medium
1
Low
0
Unscored
0
CISA KEV
0

Latest dev.dsf/dsf-bpe-process-api-v2 CVEs

Newest publication first

  1. CVE-2026-40942 DSF: Inverted Time Comparison in OIDC JWKS and Token Cache

    Published
    MediumCVSS 6.3 EPSS 0.29%

    The Data Sharing Framework (DSF) implements a distributed process engine based on the BPMN 2.0 and FHIR R4 standards. Prior to 2.1.0, The OIDC JWKS and Metadata Document caches used an inverted time comparison (isBefore instead of isAfter), causing the cache to never return cache...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.