Skip to content
OpenAdvisories

Package · npm

@medplum/core

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High 7.1
    CVE-2026-53728

    Medplum - Improper Validation of Redirect URI in External Auth Callback allows Authorization Code Leakage

    Medplum is a developer platform that enables development of healthcare apps. Prior to version 5.1.6, the external identity provider callback at GET /auth/external accepts attacker-controlled redirect URIs that only need to start with a registered client redir…

    medplum medplum @medplum/core npm