bahmni-core vulnerabilities

2 known vulnerabilities in bahmni-core from Bahmni. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.7 High severity

  bahmni-core: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2026-63194Nov 11, 2026Bahmni

  OpenMRS module bahmnicore contains Core OpenMRS modules for Bahmni (including ERP & ELIS Atom Feed Clients). In version 0.93, there is insufficient validation of input paths during the admin CSV import process, allowing for potential arbitrary file write. This

• 7.1 High severity

  bahmni-core: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2026-63192Nov 11, 2026Bahmni

  OpenMRS module bahmnicore contains Core OpenMRS modules for Bahmni (including ERP & ELIS Atom Feed Clients). In version 0.93, an attacker with authenticated access could potentially exfiltrate sensitive data from the database. This issue has been patched in ve