Skip to content
OpenAdvisories

Package · Maven

org.openmrs.web:openmrs-web

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.4
    CVE-2026-40076

    OpenMRS Core arbitrary file write and code execution via Zip Slip in module upload

    OpenMRS Core is an open source electronic medical record system platform. In versions 2.7.8 and earlier and versions 2.8.0 through 2.8.5, the module upload endpoint at POST `/openmrs/ws/rest/v1/module` is vulnerable to a Zip Slip path traversal attack. During…

    openmrs openmrs-core org.openmrs.web:openmrs-web Maven