CVE-2026-40075
1 advisory.
Maven/org.openmrs.web:openmrs-web CVE-2026-40075: high 7.5
OpenMRS ModuleResourcesServlet has Path Traversal that Leads to Arbitrary File Read
Action: Upgrade org.openmrs.web:openmrs-web to 2.8.6 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 2.7.8 |
| 2.8.0 | 2.8.6 | - |
Fixed versions
| 2.8.6 |
Sources
- osv: GHSA-jjgj-cx3q-pw4w
- https://github.com/openmrs/openmrs-core/security/advisories/GHSA-jjgj-cx3q-pw4w
- https://nvd.nist.gov/vuln/detail/CVE-2026-40075
- https://github.com/openmrs/openmrs-core
CVE-2026-40075 · published · modified · JSON