| Name | Modified | Size | Downloads / Week |
|---|---|---|---|
| Parent folder | |||
| CHANGELOG.md | 2026-03-19 | 115.7 kB | |
| 8-0-0-Patch-2.zip | 2026-03-18 | 441.8 MB | |
| 8-0-0-Patch-2.zip.md5 | 2026-03-18 | 52 Bytes | |
| 8-0-0-Patch-2.zip.sha256 | 2026-03-18 | 84 Bytes | |
| 8-0-0-Patch-2.zip.sha512 | 2026-03-18 | 148 Bytes | |
| README.md | 2026-03-18 | 2.0 kB | |
| v8.0.0.2 source code.tar.gz | 2026-03-18 | 535.8 MB | |
| v8.0.0.2 source code.zip | 2026-03-18 | 542.3 MB | |
| Totals: 8 Items | 1.5 GB | 0 | |
8.0.0.2 - 2026-03-18
Security
- [Critical] RCE in backup.php command injection (github.com)
- [High] Stored XSS in Eye Exam form answers
- [High] SSRF via PDF generator
- [High] Arbitrary file read via PDF generator
- [High] zhAclCheck ignores explicit ACL denies
- [High] Stored XSS in portal_payment.php via unescaped table_args (github.com)
- [Medium] DICOM path traversal
- [Medium] Vitals IDOR (POST + PUT + legacy form)
- [Medium] DOM XSS via SearchHighlight
- [Medium] Stored XSS in portal credential print view
- [Medium] Authorization bypass in dated reminders log
-
PHPSessionWrapper constructor bypasses read_and_close session mode, causing lock contention (#10931)