Vulnerabilities

TI-2026-35171 CVE-2026-47664

Pathling: $import-pnp operation enables authenticated SSRF, credential leakage, and warehouse data poisoning

HIGH 72

Pathling is a set of tools that make it easier to use FHIR and clinical terminology within health data analytics.

CVSS 4.0HIGH 8.6 Network Low privileges No interaction EPSS 0.00206 Published 2026-08-07 Fixed in 2.0.0 CWE-20

TI-2026-35170 CVE-2026-47663

HIGH 77

Pathling is a set of tools that make it easier to use FHIR and clinical terminology within health data analytics.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00406 Published 2026-08-07 Fixed in 2.0.0 CWE-285

TI-2026-35169 CVE-2026-47662

HIGH 77

Pathling is a set of tools that make it easier to use FHIR and clinical terminology within health data analytics.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00406 Published 2026-08-07 Fixed in 2.0.0 CWE-20

TI-2026-35168 CVE-2026-47661

HIGH 71

Pathling is a set of tools that make it easier to use FHIR and clinical terminology within health data analytics.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00623 Published 2026-08-07 Fixed in 2.0.0 CWE-22

TI-2026-35167 CVE-2026-47660

MEDIUM 44

Pathling is a set of tools that make it easier to use FHIR and clinical terminology within health data analytics.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00543 Published 2026-08-07 Fixed in 2.0.0 CWE-522

TI-2026-35166 CVE-2026-47659

HIGH 71

Pathling is a set of tools that make it easier to use FHIR and clinical terminology within health data analytics.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00623 Published 2026-08-07 Fixed in 2.0.0 CWE-22