Skip to main content

Fire Arrow Server 1.8.0

· 4 min read

Fire Arrow Server 1.8.0 has been released.

  • (security) Close search-parameter side-channel for property-filtered fields
  • (feature) Resolve FHIR R4 conditional and logical Patient references in authorization
  • (bugfix) Fix inherited roles being dropped when a child organization has a direct role
  • (bugfix) Fix HFQL rejecting every request with 403 Forbidden when no explicit search/read rules are configured
  • (maintenance) Dependency upgrades across server, UI, and tooling

Fire Arrow 2.5.2

· One min read

Fire Arrow 2.5.2 has been released. This is a security release and all users are strongly encouraged to upgrade to this version.

  • (security) Fix LegitimateInterest validator not blocking resources to unauthorized organizations