Gematik vulnerabilities
We track 3 vulnerabilities in Gematik products across 4 products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on March 27, 2026.
Latest Gematik vulnerabilities
- 9.3 Critical severity
app-Authenticator: Improper Verification of Source of a Communication Channel
Gematik Authenticator securely authenticates users for login to digital health applications. Versions prior to 4.16.0 are vulnerable to authentication flow hijacking, potentially allowing attackers to authenticate with the identities of victim users who click
- 7.8 High severity
app-Authenticator: Improper Neutralization of Special Elements used in an OS Command
Gematik Authenticator securely authenticates users for login to digital health applications. Starting in version 4.12.0 and prior to version 4.16.0, the Mac OS version of the Authenticator is vulnerable to remote code execution, triggered when victims open a m
- 9.8 Critical severity
app-referencevalidator: Improper Restriction of XML External Entity Reference
The reference validator is a tool to perform advanced validation of FHIR resources for TI applications and interoperability standards. The profile location routine in the referencevalidator commons package is vulnerable to `XML External Entities` attack due to