**SSRF in Medical Device Integration:** MedSecure integrates with medical devices via HL7 FHIR APIs. SSRF could expose patient data from connected devices. - **XXE in Clinical Document Architecture (CDA):** CDA documents are XML-based. XXE in clinical document processing could expose entire patient