CVE-2026-40076
1 advisory.
Maven/org.openmrs.web:openmrs-web CVE-2026-40076: high 8.7
OpenMRS Module Upload Vulnerable to Path Traversal (Zip Slip)
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 2.7.8 |
| 2.8.0 | - | 2.8.5 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-78fc-9688-w8xw
- https://github.com/openmrs/openmrs-core/security/advisories/GHSA-78fc-9688-w8xw
- https://nvd.nist.gov/vuln/detail/CVE-2026-40076
- https://github.com/openmrs/openmrs-core
CVE-2026-40076 · published · modified · JSON