OpenHealthForAll vulnerabilities
We track 1 vulnerability in OpenHealthForAll products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on October 15, 2026.
1vulnerabilities
0critical
1high
0exploited
7.7average CVSS score
Latest OpenHealthForAll vulnerabilities
- 7.7 High severity
OpenHealth: Missing Authentication for Critical Functionality
OpenHealth through 0.2.0 contains a missing authentication and authorization vulnerability in the /api/health-data/[id] GET, PATCH and DELETE handlers that query records by id without session or authorId checks. Unauthenticated attackers who know a HealthData