pathling vulnerabilities

6 known vulnerabilities in pathling from Aehrc. 6 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.6 High severity

  Pathling is a set of tools that make it easier to use FHIR and clinical terminology within…

  CVE-2026-47664Aug 7, 2026Aehrc

  Pathling is a set of tools that make it easier to use FHIR and clinical terminology within health data analytics. Prior to version 2.0.0 of Pathling Server, the `$import-pnp` operation in Pathling Server accepts a caller-supplied `exportUrl` and uses it as the

• 8.7 High severity

  pathling: Improper Authorization

  CVE-2026-47663Aug 7, 2026Aehrc

  Pathling is a set of tools that make it easier to use FHIR and clinical terminology within health data analytics. Prior to version 2.0.0 of Pathling Server, Pathling's typed CRUD/search/batch FHIR surface allows an authenticated caller with only coarse operati

• 8.7 High severity

  Pathling is a set of tools that make it easier to use FHIR and clinical terminology within…

  CVE-2026-47662Aug 7, 2026Aehrc

  Pathling is a set of tools that make it easier to use FHIR and clinical terminology within health data analytics. Prior to version 2.0.0 of Pathling Server, Pathling's typed CRUD/search/batch FHIR surface allows an authenticated caller with only coarse operati

• 8.7 High severity

  pathling: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2026-47661Aug 7, 2026Aehrc

  Pathling is a set of tools that make it easier to use FHIR and clinical terminology within health data analytics. Prior to version 2.0.0 of Pathling Server, Pathling's `/$result` endpoint allows a caller who can obtain any valid async export job ID to supply `

• 8.7 High severity

  pathling: Insufficiently Protected Credentials

  CVE-2026-47660Aug 7, 2026Aehrc

  Pathling is a set of tools that make it easier to use FHIR and clinical terminology within health data analytics. Prior to version 2.0.0 of Pathling Server, Pathling's bulk-submit operation allows an allowed submitter to supply an explicit `oauthMetadataUrl` p

• 8.7 High severity

  pathling: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2026-47659Aug 7, 2026Aehrc

  Pathling is a set of tools that make it easier to use FHIR and clinical terminology within health data analytics. Prior to version 2.0.0 of Pathling Server, Pathling's `/$result` endpoint allows a caller who can obtain any valid async export job ID to supply `