ehr-data-parsing

Warn

Audited by Snyk on Jul 9, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (high risk: 0.70). The required workflow parses user-provided HL7v2 message text and FHIR JSON (e.g., raw strings / json.load(...) inputs) into Python objects, so any outsider-authored clinical message content would be ingested as readable free text at runtime via hl7.parse(raw) and Bundle.model_validate(bundle_json).

Issues (1)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Jul 9, 2026, 05:59 PM
Issues
1
Security Audit — snyk — ehr-data-parsing