NVD CVE-2026-53728 (CVSS 3.1 7.1 HIGH) - GE HealthCare
Medplum is a developer platform that enables development of healthcare apps. Prior to version 5.1.6, the external identity provider callback at GET /auth/external accepts attacker-controlled redirect URIs that only need to start with a registered client redirect URI, rather than