Medplum - Exposure of OAuth client secret via dynamic registration endpoint in self-hosted configurations
CVE-2026-44506
Medplum is a developer platform that enables development of healthcare apps. In Medplum versions 4.1.10 through 5.1.6, t
#advisory
共收录 23717 条相关情报。
← 返回所有主题Medplum - Improper Validation of Redirect URI in External Auth Callback allows Authorization Code Leakage
CVE-2026-53728
Medplum is a developer platform that enables development of healthcare apps. Prior to version 5.1.6, the external identi
rubyzip before 3.4.0 Path Traversal in Zip::Entry#extract via Sibling-Directory Prefix
CVE-2026-85396
rubyzip versions before 3.4.0 contain a path traversal vulnerability in Zip::Entry#extract that fails to properly valida
UnoPim before 2.1.3 Missing Authorization on Integration Management Routes
CVE-2026-85395
UnoPim before 2.1.3 fails to include integration store, update, and key-generation routes in its ACL map, allowing any a
python-jose through 3.5.0 Algorithm Confusion via DER-encoded Public Key as HMAC Secret
CVE-2024-33663 · CVE-2026-85394
python-jose through 3.5.0 fails to properly validate asymmetric keys in HMAC initialization, accepting DER-encoded publi
node-forge through 1.4.0 RSA PKCS#1 v1.5 Signature Forgery via Nested DigestAlgorithm Padding
CVE-2026-33894 · CVE-2026-85393
node-forge through 1.4.0 fails to validate element count in nested DigestAlgorithm sequences during RSA PKCS#1 v1.5 sign
Peppermint through 0.5.5 Authorization Bypass on the User Logout Endpoint
CVE-2026-85392
Peppermint through 0.5.5 contains an authorization bypass vulnerability in the GET /api/v1/auth/user/:id/logout endpoint
Peppermint through 0.5.5 Use of Hard-coded JWT Signing Secret in docker-compose.yml
CVE-2026-85391
Peppermint through 0.5.5 contains a hardcoded JWT signing secret in docker-compose.yml that allows unauthenticated attac
Checkmate through 3.11.0 Missing Authorization on Maintenance Window, Notification, and Check Deletion Routes
CVE-2026-85390
Checkmate through 3.11.0 omits the isAllowed role guard middleware on maintenance-window, notification, and check-deleti
Worklenz before 3.0.0 Authorization Bypass on Task-Scoped Endpoints
CVE-2026-85389
Worklenz before 3.0.0 fails to verify task ownership by organization when resolving task-scoped API endpoints, allowing
Worklenz through 3.0.0 SQL Injection via the sort-field Query Parameter
CVE-2026-25947 · CVE-2026-85388
Worklenz through 3.0.0 fails to properly validate the sort-field query parameter in pagination helper functions, allowin
c-ares : Use-after-free / double-free in c-ares query-completion handling, remotely triggerable via ares_getaddrinfo() over TCP
CVE-2026-33630
c-ares is an asynchronous resolver library. From ver 1.32.3 until 1.34.7, a use-after-free / double-free in c-ares' quer
Waku: Open Redirect via `unstable_redirect` Helper
CVE-2026-49456
Waku is the minimal React framework. Prior to version 1.0.0-beta.1, the unstable_redirect() helper exported from waku/ro
Waku: Cross-Origin CSRF on RSC Server Action Dispatch
CVE-2026-49455
Waku is the minimal React framework. Prior to version 1.0.0-beta.1, Waku's RSC request dispatcher invokes server actions
Creation of Temporary File in Directory with Insecure Permissions in AWS FPGA Development Kit
CVE-2026-85028
Creation of a temporary file in a directory with insecure permissions in the FPGA management tool installation component
Unauthenticated file upload via missing authorization on formatter upload endpoint
CVE-2026-63219
GeoNetwork is a catalog application to manage spatially referenced resources. Prior to versions 4.4.12 and 4.2.17, the A
GeoNetwork vulnerable to Remote Code Execution via unsafe Saxon XSLT processor configuration in formatter
CVE-2026-58400
GeoNetwork is a catalog application to manage spatially referenced resources. Prior to versions 4.4.12 and 4.2.17, the S
OpenList: Authenticated arbitrary file write via Content-Disposition path traversal in SimpleHttp offline-download tool
CVE-2026-75602
OpenList a file list program that supports multiple storage. Prior to 4.2.3, OpenList's offline-download feature at POST
MISP Event Template Definition Validation Bypass Allows Persistent Denial of Service
CVE-2026-85239
A vulnerability in MISP's event template handling allowed an authenticated user with permission to create or modify even
Session Fixation in MISP CustomAuth Authentication Allows Session Hijacking
CVE-2026-85238
MISP contains a session fixation vulnerability in the CustomAuth authentication (a custom configuration) flow. When a us