Skip to content
OpenAdvisories

Product · fbeta-GmbH

ePA3-Service-OpenSource

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.8
    CVE-2026-50576

    ePA 3.x Integration: HTTP Header Injection in VAU Inner Requests

    ePA 3.x Integration implements the authorization workflow and writes Medical Information Objects to Germany's electronic patient record. Prior to 1.3.0, ePA 3.x Integration does not neutralize CRLF characters in values used by app/vau/VAUProtokoll.py to const…

    fbeta-GmbH ePA3-Service-OpenSource