CVE-2026-53728
1 advisory.
npm/@medplum/core CVE-2026-53728: high 7.1
Medplum: Improper Validation of Redirect URI in External Auth Callback allows Authorization Code Leakage
Action: Upgrade @medplum/core to 5.1.6 or later.
npm i @medplum/core@5.1.6Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 5.1.6 | - |
Fixed versions
| 5.1.6 |
Sources
- osv: GHSA-m44r-7c5h-m6mj
- https://github.com/medplum/medplum/security/advisories/GHSA-m44r-7c5h-m6mj
- https://github.com/medplum/medplum/pull/8749
- https://github.com/medplum/medplum/commit/7ae10035ddadde4dba7b18d3156553940465b3a1
- https://github.com/medplum/medplum
- https://github.com/medplum/medplum/releases/tag/v5.1.6
CVE-2026-53728 · published · modified · JSON