openmrs openmrs-core vulnerabilities

4 published CVEs name openmrs openmrs-core among the affected products.

Critical 2High 2Medium 0Low 0Not scored 0

CVEs per yearBy the year they were published

CVE-2026-41258
OpenMRS: Stored Velocity SSTI to RCE via ConceptReferenceRange
openmrs · openmrs-core
Critical9.1
CVE-2026-40076
OpenMRS Core arbitrary file write and code execution via Zip Slip in module upload
openmrs · openmrs-core
Critical9.4
CVE-2026-40075
OpenMRS Core arbitrary file read via path traversal in ModuleResourcesServlet
openmrs · openmrs-core
High8.2
CVE-2022-23612
Directory Traversal in OpenMRS Startup Filter
openmrs · openmrs-core
High7.5