medplum vulnerabilities

CVEs whose affected-version data names the medplum package (npm). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-53728High· 7.1PoC

2w ago

Medplum is a developer platform that enables development of healthcare apps

Medplum is a developer platform that enables development of healthcare apps. Prior to version 5.1.6, the external identity provider callback at GET /auth/external accepts attacker-controlled redirect URIs that only need to start with a r…

▾ Midnightmedplum · medplumEPSS 0.14%via NVD