CVE-2026-103019

OpenEMR is a free and open source electronic health records and medical practice management application. Prior to 8.3.0, userSessionLogout in src/RestControllers/AuthorizationController.php uses decodeToken to process an idtokenhint without verifying its signature and, when the referenced trusted...