ehr-data-parsing
Warn
Audited by Snyk on Jul 9, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.70). The required workflow parses user-provided HL7v2 message text and FHIR JSON (e.g.,
rawstrings /json.load(...)inputs) into Python objects, so any outsider-authored clinical message content would be ingested as readable free text at runtime viahl7.parse(raw)andBundle.model_validate(bundle_json).
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata