Digest · Thursday
Security digest: January 30, 2025
1 critical advisory.
All digests · RSS · Markdown
Take stock
- Maven: 1 critical advisory (
org.openmrs:openmrs,org.openmrs.module:legacyui,org.openmrs.module:idgen,org.openmrs.module:addresshierarchy,org.openmrs.module:attachments,org.openmrs.module:patientflags). Check withmvn dependency:tree -Dincludes=<groupId>:<artifactId>. - None of it touches your stack? Then there is nothing to do today. That is a result, not a failure to read carefully.
Known exploited (CISA KEV) 0
Added to CISA’s catalog on this day: confirmed exploitation in the wild. Due date = CISA’s deadline for US federal agencies.
None.
Critical advisories by ecosystem 1
GitHub-reviewed advisories rated critical, published this day (Pacific time).
Maven 1
Check: mvn dependency:tree -Dincludes=<groupId>:<artifactId>
- General OpenMRS Security Advisory, January 2025: Penetration Testing Results and Patches GHSA-vpxm-cr3r-pjp9
org.openmrs:openmrs< 2.6.11 → fixed in 2.6.11;org.openmrs.module:legacyui< 1.21.0 → fixed in 1.21.0;org.openmrs.module:idgen< 4.14.0 → fixed in 4.14.0; +3 more packages