Vulnerabilities in medplum

3 results

CVE-2026-44506HIGHMedplum - Exposure of OAuth client secret via dynamic registration endpoint in self-hosted configurationsEPSS 0.4%CVE-2026-49120MEDIUMMedplum < 5.1.14 SSRF via FHIR Subscription EndpointEPSS 0.2%CVE-2026-53728HIGHMedplum - Improper Validation of Redirect URI in External Auth Callback allows Authorization Code LeakageEPSS 0.2%