Security: openmrs/openmrs-core
Security Advisories
View known security vulnerabilities and report new vulnerabilities privately to maintainers.
-
Authorization bypass in data access methodsGHSA-54gp-r4pj-3wp3 published
Aug 20, 2026 by ibacherHigh -
Stored Velocity SSTI to RCE via ConceptReferenceRangeGHSA-xj4f-8jjg-vx4q published
May 4, 2026 by ibacherCritical -
Broken Access Control in HL7 ConfigurationGHSA-g7rc-8fr4-5p2p published
Jun 3, 2026 by ibacherHigh -
Path Traversal in OpenMRS ModuleResourcesServlet Leading to Arbitrary File ReadGHSA-jjgj-cx3q-pw4w published
May 4, 2026 by ibacherHigh -
Path Traversal (Zip Slip) in OpenMRS Module UploadGHSA-78fc-9688-w8xw published
May 4, 2026 by ibacherHigh -
General OpenMRS Security Advisory, January 2025: Penetration Testing Results and PatchesGHSA-vpxm-cr3r-pjp9 published
Jan 30, 2025 by gracepotmaCritical -
Directory Traversal in OpenMRS Startup FilterGHSA-8rgr-ww69-jv65 published
Feb 22, 2022 by gracepotmaHigh