Aehrc vulnerabilities
We track 6 vulnerabilities in Aehrc products. 6 are rated high or critical, and none are known to be exploited. The most recent was published on August 7, 2026.
Latest Aehrc vulnerabilities
- 8.6 High severity
Pathling is a set of tools that make it easier to use FHIR and clinical terminology within…
Pathling is a set of tools that make it easier to use FHIR and clinical terminology within health data analytics. Prior to version 2.0.0 of Pathling Server, the `$import-pnp` operation in Pathling Server accepts a caller-supplied `exportUrl` and uses it as the
- 8.7 High severity
pathling: Improper Authorization
Pathling is a set of tools that make it easier to use FHIR and clinical terminology within health data analytics. Prior to version 2.0.0 of Pathling Server, Pathling's typed CRUD/search/batch FHIR surface allows an authenticated caller with only coarse operati
- 8.7 High severity
Pathling is a set of tools that make it easier to use FHIR and clinical terminology within…
Pathling is a set of tools that make it easier to use FHIR and clinical terminology within health data analytics. Prior to version 2.0.0 of Pathling Server, Pathling's typed CRUD/search/batch FHIR surface allows an authenticated caller with only coarse operati
- 8.7 High severity
pathling: Improper Limitation of a Pathname to a Restricted Directory
Pathling is a set of tools that make it easier to use FHIR and clinical terminology within health data analytics. Prior to version 2.0.0 of Pathling Server, Pathling's `/$result` endpoint allows a caller who can obtain any valid async export job ID to supply `
- 8.7 High severity
pathling: Insufficiently Protected Credentials
Pathling is a set of tools that make it easier to use FHIR and clinical terminology within health data analytics. Prior to version 2.0.0 of Pathling Server, Pathling's bulk-submit operation allows an allowed submitter to supply an explicit `oauthMetadataUrl` p
- 8.7 High severity
pathling: Improper Limitation of a Pathname to a Restricted Directory
Pathling is a set of tools that make it easier to use FHIR and clinical terminology within health data analytics. Prior to version 2.0.0 of Pathling Server, Pathling's `/$result` endpoint allows a caller who can obtain any valid async export job ID to supply `