CVE-2026-124468: openemr: OpenEMR before 8.3.0 contains an SQL injection vulnerability in the Standard REST API patient insurance and employer…

OpenEMR before 8.3.0 contains an SQL injection vulnerability in the Standard REST API patient insurance and employer search, which concatenates query-string parameter names into SQL as column identifiers without escaping. Authenticated clients, including low-privilege patient-portal OAuth2 tokens...