# Found 3 security vulnerabilities

**URL:** <https://community.open-emr.org/t/found-3-security-vulnerabilities/26912>\
**Category:** Security\
**Created:** [July 20, 2026, 3:27am UTC](https://community.open-emr.org/t/found-3-security-vulnerabilities/26912 "2026-07-20T03:27:50Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![lyethar](https://community.open-emr.org/user_avatar/community.open-emr.org/lyethar/32/23259_2.png) [@lyethar](https://community.open-emr.org/u/lyethar)\
**Post date:** [July 20, 2026, 3:27am UTC](https://community.open-emr.org/t/found-3-security-vulnerabilities/26912/1 "2026-07-20T03:27:50Z")

</div>

Hello Team,

I have identified three vulnerabilities that deserve attention, and would like to responsibly disclose them, as these affect all deployments of the software. I have already sent an email to the security contact listed in the Github security details. Additionally, I have created three different security advisories for all the vulnerabilities identified, which need to be triaged. Please advise on how to proceed.

Thank you

---

<div class="post-metadata">

**Author:** ![stephenwaite](https://community.open-emr.org/user_avatar/community.open-emr.org/stephenwaite/32/15754_2.png) [@stephenwaite](https://community.open-emr.org/u/stephenwaite)\
**Post date:** [July 20, 2026, 12:28pm UTC](https://community.open-emr.org/t/found-3-security-vulnerabilities/26912/2 "2026-07-20T12:28:35Z")

</div>

![OpenEMR](https://discourse-uploads-openemr.s3.dualstack.us-east-1.amazonaws.com/original/3X/a/f/af53128d075dd96d3089510059b5dd8aa0486ff5.png)

### OpenEMR Security Team

Thank you for reporting this to the OpenEMR Security Team, and for using the private advisory channel.

For a status update — or if you need to reach us about this — please add a comment there in the advisory and we’ll respond.

Thanks for your contribution to OpenEMR and your patience with this process.