carlos-emr/carlos

Admin › User Management: 'Assign Role to Provider' search dropdown only offers the provider's current role about 6 hours ago

good first issue type: bug Review effort [1-5]: 2 priority: medium

carlos-emr/carlos

25

Open-source Electronic Medical Records (EMR) for Canadian healthcare — HL7, FHIR, Java 21, Spring 5. Contributors welcome!

Java

#beginner-friendly#contributions-welcome#devcontainer#digital-health#ehr#electronic-medical-records#emr#fhir#good-first-issue#healthcare#hibernate#hl7#java#jsp#mariadb#maven#open-source#spring-boot#tomcat#webapp

(claude assist) Retire or gate the oscarRxFax mutation in FrmCustomedPDFServlet about 12 hours ago

help wanted type: security Review effort [1-5]: 2 Review effort [1-5]: 3 priority: high

carlos-emr/carlos

25

Open-source Electronic Medical Records (EMR) for Canadian healthcare — HL7, FHIR, Java 21, Spring 5. Contributors welcome!

Java

#beginner-friendly#contributions-welcome#devcontainer#digital-health#ehr#electronic-medical-records#emr#fhir#good-first-issue#healthcare#hibernate#hl7#java#jsp#mariadb#maven#open-source#spring-boot#tomcat#webapp

[Security] RxWebService: direct drug sub-path endpoints bypass privilege check; represcribe() and recordPrescriptionPrint() unprotected (claude assist) about 12 hours ago

help wanted good first issue type: security type: bug Review effort [1-5]: 2 priority: high

carlos-emr/carlos

25

Open-source Electronic Medical Records (EMR) for Canadian healthcare — HL7, FHIR, Java 21, Spring 5. Contributors welcome!

Java

#beginner-friendly#contributions-welcome#devcontainer#digital-health#ehr#electronic-medical-records#emr#fhir#good-first-issue#healthcare#hibernate#hl7#java#jsp#mariadb#maven#open-source#spring-boot#tomcat#webapp

[Security] Path traversal / arbitrary .html file read in oscarLogging.jsp via reportDate (no PathValidationUtils) (claude assist) about 12 hours ago

help wanted good first issue type: security Review effort [1-5]: 1 priority: high

carlos-emr/carlos

25

Open-source Electronic Medical Records (EMR) for Canadian healthcare — HL7, FHIR, Java 21, Spring 5. Contributors welcome!

Java

#beginner-friendly#contributions-welcome#devcontainer#digital-health#ehr#electronic-medical-records#emr#fhir#good-first-issue#healthcare#hibernate#hl7#java#jsp#mariadb#maven#open-source#spring-boot#tomcat#webapp

[Security] OAuthStatusService /oauth/info serializes full Provider entity — OHIP and billing numbers over-disclosed to OAuth clients (claude assist) about 12 hours ago

help wanted good first issue type: security type: bug Review effort [1-5]: 2 priority: high

carlos-emr/carlos

25

Open-source Electronic Medical Records (EMR) for Canadian healthcare — HL7, FHIR, Java 21, Spring 5. Contributors welcome!

Java

#beginner-friendly#contributions-welcome#devcontainer#digital-health#ehr#electronic-medical-records#emr#fhir#good-first-issue#healthcare#hibernate#hl7#java#jsp#mariadb#maven#open-source#spring-boot#tomcat#webapp

[Bug] RxDsMessageTo1: leftover debug logger.error() fires on every constructor instantiation — dumps drug interaction map at ERROR level (claude assist) about 12 hours ago

help wanted good first issue type: security type: bug Review effort [1-5]: 1 technical debt type: technical-debt priority: high

carlos-emr/carlos

25

Open-source Electronic Medical Records (EMR) for Canadian healthcare — HL7, FHIR, Java 21, Spring 5. Contributors welcome!

Java

#beginner-friendly#contributions-welcome#devcontainer#digital-health#ehr#electronic-medical-records#emr#fhir#good-first-issue#healthcare#hibernate#hl7#java#jsp#mariadb#maven#open-source#spring-boot#tomcat#webapp

deps: bump pinned npm overrides for postcss, brace-expansion and fast-uri advisories about 14 hours ago

help wanted good first issue type: security Review effort [1-5]: 2 technical debt priority: low

carlos-emr/carlos

25

Open-source Electronic Medical Records (EMR) for Canadian healthcare — HL7, FHIR, Java 21, Spring 5. Contributors welcome!

Java

#beginner-friendly#contributions-welcome#devcontainer#digital-health#ehr#electronic-medical-records#emr#fhir#good-first-issue#healthcare#hibernate#hl7#java#jsp#mariadb#maven#open-source#spring-boot#tomcat#webapp

docs: Docusaurus site fails to build — 24 pages fail MDX compilation, no CI job catches it about 15 hours ago

help wanted good first issue Review effort [1-5]: 3 technical debt type: documentation type: technical-debt priority: low

carlos-emr/carlos

25

Open-source Electronic Medical Records (EMR) for Canadian healthcare — HL7, FHIR, Java 21, Spring 5. Contributors welcome!

Java

#beginner-friendly#contributions-welcome#devcontainer#digital-health#ehr#electronic-medical-records#emr#fhir#good-first-issue#healthcare#hibernate#hl7#java#jsp#mariadb#maven#open-source#spring-boot#tomcat#webapp

maintenance: loggedInInfo not null-checked before hasPrivilege() in demographic gate actions and some pageUtil mutators about 17 hours ago

help wanted type: security Review effort [1-5]: 3 priority: medium

carlos-emr/carlos

25

Open-source Electronic Medical Records (EMR) for Canadian healthcare — HL7, FHIR, Java 21, Spring 5. Contributors welcome!

Java

#beginner-friendly#contributions-welcome#devcontainer#digital-health#ehr#electronic-medical-records#emr#fhir#good-first-issue#healthcare#hibernate#hl7#java#jsp#mariadb#maven#open-source#spring-boot#tomcat#webapp

bug: RourkeExport2Action uses a shared XML filename and continues on save failure — cross-patient PHI risk about 17 hours ago

help wanted type: security type: bug Review effort [1-5]: 2 priority: high

carlos-emr/carlos

25

Open-source Electronic Medical Records (EMR) for Canadian healthcare — HL7, FHIR, Java 21, Spring 5. Contributors welcome!

Java

#beginner-friendly#contributions-welcome#devcontainer#digital-health#ehr#electronic-medical-records#emr#fhir#good-first-issue#healthcare#hibernate#hl7#java#jsp#mariadb#maven#open-source#spring-boot#tomcat#webapp

[Security] ScatterPlotChartServlet: no SecurityInfoManager.hasPrivilege() check — any authenticated user can retrieve any patient's measurement chart (claude assist) about 18 hours ago

help wanted type: security type: bug Review effort [1-5]: 3 priority: high

carlos-emr/carlos

25

Open-source Electronic Medical Records (EMR) for Canadian healthcare — HL7, FHIR, Java 21, Spring 5. Contributors welcome!

Java

#beginner-friendly#contributions-welcome#devcontainer#digital-health#ehr#electronic-medical-records#emr#fhir#good-first-issue#healthcare#hibernate#hl7#java#jsp#mariadb#maven#open-source#spring-boot#tomcat#webapp

[Security] AppointmentExtTo.toString() leaks patient name, phone, and email to application logs (claude assist) about 18 hours ago

help wanted good first issue type: security Review effort [1-5]: 2 priority: medium

carlos-emr/carlos

25

Open-source Electronic Medical Records (EMR) for Canadian healthcare — HL7, FHIR, Java 21, Spring 5. Contributors welcome!

Java

#beginner-friendly#contributions-welcome#devcontainer#digital-health#ehr#electronic-medical-records#emr#fhir#good-first-issue#healthcare#hibernate#hl7#java#jsp#mariadb#maven#open-source#spring-boot#tomcat#webapp

Escape email status error popover content as an HTML attribute about 18 hours ago

help wanted good first issue type: security Review effort [1-5]: 2 priority: high

carlos-emr/carlos

25

Open-source Electronic Medical Records (EMR) for Canadian healthcare — HL7, FHIR, Java 21, Spring 5. Contributors welcome!

Java

#beginner-friendly#contributions-welcome#devcontainer#digital-health#ehr#electronic-medical-records#emr#fhir#good-first-issue#healthcare#hibernate#hl7#java#jsp#mariadb#maven#open-source#spring-boot#tomcat#webapp

Schedule: provider last-name search box limited to 10 characters 2 days ago

good first issue type: enhancement priority: medium

carlos-emr/carlos

25

Open-source Electronic Medical Records (EMR) for Canadian healthcare — HL7, FHIR, Java 21, Spring 5. Contributors welcome!

Java

#beginner-friendly#contributions-welcome#devcontainer#digital-health#ehr#electronic-medical-records#emr#fhir#good-first-issue#healthcare#hibernate#hl7#java#jsp#mariadb#maven#open-source#spring-boot#tomcat#webapp

MfaActions2Action: resetMfa() missing privilege check, NumberFormatException on bad securityId, and null return (claude assist) 6 days ago

help wanted good first issue type: security type: bug Review effort [1-5]: 2 priority: high

carlos-emr/carlos

25

Open-source Electronic Medical Records (EMR) for Canadian healthcare — HL7, FHIR, Java 21, Spring 5. Contributors welcome!

Java

#beginner-friendly#contributions-welcome#devcontainer#digital-health#ehr#electronic-medical-records#emr#fhir#good-first-issue#healthcare#hibernate#hl7#java#jsp#mariadb#maven#open-source#spring-boot#tomcat#webapp

FacilityManager2Action: missing privilege check and no GET rejection for delete/save/add mutations 6 days ago

help wanted type: security Review effort [1-5]: 2 priority: high

carlos-emr/carlos

25

Open-source Electronic Medical Records (EMR) for Canadian healthcare — HL7, FHIR, Java 21, Spring 5. Contributors welcome!

Java

#beginner-friendly#contributions-welcome#devcontainer#digital-health#ehr#electronic-medical-records#emr#fhir#good-first-issue#healthcare#hibernate#hl7#java#jsp#mariadb#maven#open-source#spring-boot#tomcat#webapp

MfaActions2Action: missing privilege check and GET rejection for MFA secret reset 6 days ago

help wanted good first issue type: security Review effort [1-5]: 2 priority: high

carlos-emr/carlos

25

Open-source Electronic Medical Records (EMR) for Canadian healthcare — HL7, FHIR, Java 21, Spring 5. Contributors welcome!

Java

#beginner-friendly#contributions-welcome#devcontainer#digital-health#ehr#electronic-medical-records#emr#fhir#good-first-issue#healthcare#hibernate#hl7#java#jsp#mariadb#maven#open-source#spring-boot#tomcat#webapp

[Security] ProviderService.saveProviderSettings() IDOR — any authenticated user can overwrite any provider's settings (claude assist) 6 days ago

help wanted good first issue type: security type: bug Review effort [1-5]: 2 priority: high

carlos-emr/carlos

25

Open-source Electronic Medical Records (EMR) for Canadian healthcare — HL7, FHIR, Java 21, Spring 5. Contributors welcome!

Java

#beginner-friendly#contributions-welcome#devcontainer#digital-health#ehr#electronic-medical-records#emr#fhir#good-first-issue#healthcare#hibernate#hl7#java#jsp#mariadb#maven#open-source#spring-boot#tomcat#webapp

[Security] NotesService.getIssueNote() IDOR — clinical note content accessible by bare note ID without ownership check (claude assist) 6 days ago

help wanted good first issue type: security type: bug Review effort [1-5]: 1 priority: high

carlos-emr/carlos

25

Open-source Electronic Medical Records (EMR) for Canadian healthcare — HL7, FHIR, Java 21, Spring 5. Contributors welcome!

Java

#beginner-friendly#contributions-welcome#devcontainer#digital-health#ehr#electronic-medical-records#emr#fhir#good-first-issue#healthcare#hibernate#hl7#java#jsp#mariadb#maven#open-source#spring-boot#tomcat#webapp

[Security] AllergyWs SOAP service: all read methods missing _allergy r privilege check (claude assist) 6 days ago

help wanted good first issue type: security Review effort [1-5]: 2 priority: high

carlos-emr/carlos

25

Open-source Electronic Medical Records (EMR) for Canadian healthcare — HL7, FHIR, Java 21, Spring 5. Contributors welcome!

Java

#beginner-friendly#contributions-welcome#devcontainer#digital-health#ehr#electronic-medical-records#emr#fhir#good-first-issue#healthcare#hibernate#hl7#java#jsp#mariadb#maven#open-source#spring-boot#tomcat#webapp

[Security] RxDeleteRx2Action / RxManagePharmacy2Action — prescription deletion and pharmacy links bypass patient ownership check (companion to #2451) 6 days ago

help wanted good first issue type: security Review effort [1-5]: 2 priority: high

carlos-emr/carlos

25

Open-source Electronic Medical Records (EMR) for Canadian healthcare — HL7, FHIR, Java 21, Spring 5. Contributors welcome!

Java

#beginner-friendly#contributions-welcome#devcontainer#digital-health#ehr#electronic-medical-records#emr#fhir#good-first-issue#healthcare#hibernate#hl7#java#jsp#mariadb#maven#open-source#spring-boot#tomcat#webapp

[Security] RxHideCpp2Action / RxReorder2Action — drug modified without patient ownership check; throws RuntimeException not SecurityException (claude assist) 6 days ago

help wanted type: security Review effort [1-5]: 2 priority: high

carlos-emr/carlos

25

Open-source Electronic Medical Records (EMR) for Canadian healthcare — HL7, FHIR, Java 21, Spring 5. Contributors welcome!

Java

#beginner-friendly#contributions-welcome#devcontainer#digital-health#ehr#electronic-medical-records#emr#fhir#good-first-issue#healthcare#hibernate#hl7#java#jsp#mariadb#maven#open-source#spring-boot#tomcat#webapp

security: SecurityAddSecurityHelper stores PIN in plaintext and crashes on non-numeric lock params (claude assist) 6 days ago

help wanted good first issue type: security type: bug Review effort [1-5]: 2 priority: medium

carlos-emr/carlos

25

Open-source Electronic Medical Records (EMR) for Canadian healthcare — HL7, FHIR, Java 21, Spring 5. Contributors welcome!

Java

#beginner-friendly#contributions-welcome#devcontainer#digital-health#ehr#electronic-medical-records#emr#fhir#good-first-issue#healthcare#hibernate#hl7#java#jsp#mariadb#maven#open-source#spring-boot#tomcat#webapp

security: RateLimitFilter defaults to disabled — no brute-force protection on login without explicit opt-in (claude assist) 6 days ago

help wanted good first issue type: security type: bug Review effort [1-5]: 1 priority: medium

carlos-emr/carlos

25

Open-source Electronic Medical Records (EMR) for Canadian healthcare — HL7, FHIR, Java 21, Spring 5. Contributors welcome!

Java

#beginner-friendly#contributions-welcome#devcontainer#digital-health#ehr#electronic-medical-records#emr#fhir#good-first-issue#healthcare#hibernate#hl7#java#jsp#mariadb#maven#open-source#spring-boot#tomcat#webapp

security: PMMFilter passes unauthenticated requests through instead of blocking (claude assist) 6 days ago

help wanted good first issue type: security type: bug Review effort [1-5]: 1 priority: medium

carlos-emr/carlos

25

Open-source Electronic Medical Records (EMR) for Canadian healthcare — HL7, FHIR, Java 21, Spring 5. Contributors welcome!

Java

#beginner-friendly#contributions-welcome#devcontainer#digital-health#ehr#electronic-medical-records#emr#fhir#good-first-issue#healthcare#hibernate#hl7#java#jsp#mariadb#maven#open-source#spring-boot#tomcat#webapp

[Security] Missing securityInfoManager.hasPrivilege() across JAX-WS SOAP services — most service methods lack RBAC checks (claude assist) 6 days ago

help wanted good first issue type: security type: bug Review effort [1-5]: 2 priority: high

carlos-emr/carlos

25

Open-source Electronic Medical Records (EMR) for Canadian healthcare — HL7, FHIR, Java 21, Spring 5. Contributors welcome!

Java

#beginner-friendly#contributions-welcome#devcontainer#digital-health#ehr#electronic-medical-records#emr#fhir#good-first-issue#healthcare#hibernate#hl7#java#jsp#mariadb#maven#open-source#spring-boot#tomcat#webapp

Review: Add rate limiting to REST API endpoints 6 days ago

good first issue type: investigation priority: medium

carlos-emr/carlos

25

Open-source Electronic Medical Records (EMR) for Canadian healthcare — HL7, FHIR, Java 21, Spring 5. Contributors welcome!

Java

#beginner-friendly#contributions-welcome#devcontainer#digital-health#ehr#electronic-medical-records#emr#fhir#good-first-issue#healthcare#hibernate#hl7#java#jsp#mariadb#maven#open-source#spring-boot#tomcat#webapp

Wrap BC billing save/update multi-DAO writes in transactional services 6 days ago

help wanted type: security Review effort [1-5]: 3 priority: medium

carlos-emr/carlos

25

Open-source Electronic Medical Records (EMR) for Canadian healthcare — HL7, FHIR, Java 21, Spring 5. Contributors welcome!

Java

#beginner-friendly#contributions-welcome#devcontainer#digital-health#ehr#electronic-medical-records#emr#fhir#good-first-issue#healthcare#hibernate#hl7#java#jsp#mariadb#maven#open-source#spring-boot#tomcat#webapp

Follow-up: standardize SecurityException messages + OWASP-encode URL scriptlet outputs 6 days ago

help wanted type: security Review effort [1-5]: 2 priority: medium

carlos-emr/carlos

25

Open-source Electronic Medical Records (EMR) for Canadian healthcare — HL7, FHIR, Java 21, Spring 5. Contributors welcome!

Java

#beginner-friendly#contributions-welcome#devcontainer#digital-health#ehr#electronic-medical-records#emr#fhir#good-first-issue#healthcare#hibernate#hl7#java#jsp#mariadb#maven#open-source#spring-boot#tomcat#webapp

perf: stream large documents instead of Files.readAllBytes() to eliminate 3x memory spikes 6 days ago

help wanted Enhancement Review effort [1-5]: 3 type: enhancement type: performance priority: medium

carlos-emr/carlos

25

Open-source Electronic Medical Records (EMR) for Canadian healthcare — HL7, FHIR, Java 21, Spring 5. Contributors welcome!

Java

#beginner-friendly#contributions-welcome#devcontainer#digital-health#ehr#electronic-medical-records#emr#fhir#good-first-issue#healthcare#hibernate#hl7#java#jsp#mariadb#maven#open-source#spring-boot#tomcat#webapp

perf: Migrate CaseManagementNote 3 lazy=false relationships to lazy=true (HBM) 6 days ago

help wanted type: security Enhancement Review effort [1-5]: 3 type: enhancement priority: medium

carlos-emr/carlos

25

Open-source Electronic Medical Records (EMR) for Canadian healthcare — HL7, FHIR, Java 21, Spring 5. Contributors welcome!

Java

#beginner-friendly#contributions-welcome#devcontainer#digital-health#ehr#electronic-medical-records#emr#fhir#good-first-issue#healthcare#hibernate#hl7#java#jsp#mariadb#maven#open-source#spring-boot#tomcat#webapp

perf: Migrate CaseManagementIssue.issue from lazy=false to lazy=true (HBM) 6 days ago

help wanted hibernate-6-prep type: security Enhancement Review effort [1-5]: 3 type: enhancement priority: medium

carlos-emr/carlos

25

Open-source Electronic Medical Records (EMR) for Canadian healthcare — HL7, FHIR, Java 21, Spring 5. Contributors welcome!

Java

#beginner-friendly#contributions-welcome#devcontainer#digital-health#ehr#electronic-medical-records#emr#fhir#good-first-issue#healthcare#hibernate#hl7#java#jsp#mariadb#maven#open-source#spring-boot#tomcat#webapp

perf: Migrate ConsultationRequest 3 EAGER relationships to LAZY fetch 6 days ago

help wanted type: security Enhancement Review effort [1-5]: 3 type: enhancement priority: medium

carlos-emr/carlos

25

Open-source Electronic Medical Records (EMR) for Canadian healthcare — HL7, FHIR, Java 21, Spring 5. Contributors welcome!

Java

#beginner-friendly#contributions-welcome#devcontainer#digital-health#ehr#electronic-medical-records#emr#fhir#good-first-issue#healthcare#hibernate#hl7#java#jsp#mariadb#maven#open-source#spring-boot#tomcat#webapp

fix(security): email send leaves patient PDF temp files on disk indefinitely — add per-send cleanup and orphan sweep 7 days ago

help wanted type: security type: bug Review effort [1-5]: 2 priority: high

carlos-emr/carlos

25

Open-source Electronic Medical Records (EMR) for Canadian healthcare — HL7, FHIR, Java 21, Spring 5. Contributors welcome!

Java

#beginner-friendly#contributions-welcome#devcontainer#digital-health#ehr#electronic-medical-records#emr#fhir#good-first-issue#healthcare#hibernate#hl7#java#jsp#mariadb#maven#open-source#spring-boot#tomcat#webapp

[Security] Missing securityInfoManager.hasPrivilege() across JAX-RS REST services — any authenticated user can invoke most endpoints (claude assist) 7 days ago

help wanted good first issue type: security type: bug Review effort [1-5]: 2 priority: high

carlos-emr/carlos

25

Open-source Electronic Medical Records (EMR) for Canadian healthcare — HL7, FHIR, Java 21, Spring 5. Contributors welcome!

Java

#beginner-friendly#contributions-welcome#devcontainer#digital-health#ehr#electronic-medical-records#emr#fhir#good-first-issue#healthcare#hibernate#hl7#java#jsp#mariadb#maven#open-source#spring-boot#tomcat#webapp

[Feature]: Add explicit Active button to patient search 7 days ago

good first issue Review effort [1-5]: 2 type: feature type: enhancement priority: low

carlos-emr/carlos

25

Open-source Electronic Medical Records (EMR) for Canadian healthcare — HL7, FHIR, Java 21, Spring 5. Contributors welcome!

Java

#beginner-friendly#contributions-welcome#devcontainer#digital-health#ehr#electronic-medical-records#emr#fhir#good-first-issue#healthcare#hibernate#hl7#java#jsp#mariadb#maven#open-source#spring-boot#tomcat#webapp

Sticky provider column headers on schedule view 7 days ago

good first issue type: feature priority: low

carlos-emr/carlos

25

Open-source Electronic Medical Records (EMR) for Canadian healthcare — HL7, FHIR, Java 21, Spring 5. Contributors welcome!

Java

#beginner-friendly#contributions-welcome#devcontainer#digital-health#ehr#electronic-medical-records#emr#fhir#good-first-issue#healthcare#hibernate#hl7#java#jsp#mariadb#maven#open-source#spring-boot#tomcat#webapp

feat: Normalize typography system around Bootstrap 5.3.3 with user-adjustable font sizes 7 days ago

good first issue type: feature priority: low

carlos-emr/carlos

25

Open-source Electronic Medical Records (EMR) for Canadian healthcare — HL7, FHIR, Java 21, Spring 5. Contributors welcome!

Java

#beginner-friendly#contributions-welcome#devcontainer#digital-health#ehr#electronic-medical-records#emr#fhir#good-first-issue#healthcare#hibernate#hl7#java#jsp#mariadb#maven#open-source#spring-boot#tomcat#webapp

Modernize index.jsp login landing page — 762-line monolith; consider SPA or Spring Security form-login 7 days ago

help wanted discussion Review effort [1-5]: 3 type: refactor priority: low

carlos-emr/carlos

25

Open-source Electronic Medical Records (EMR) for Canadian healthcare — HL7, FHIR, Java 21, Spring 5. Contributors welcome!

Java

#beginner-friendly#contributions-welcome#devcontainer#digital-health#ehr#electronic-medical-records#emr#fhir#good-first-issue#healthcare#hibernate#hl7#java#jsp#mariadb#maven#open-source#spring-boot#tomcat#webapp

maintenance: admin security 2Actions use SpringUtils.getBean field shims — migrate to constructor injection (claude assist) 7 days ago

help wanted Enhancement Review effort [1-5]: 3 type: enhancement type: refactor priority: low

carlos-emr/carlos

25

Open-source Electronic Medical Records (EMR) for Canadian healthcare — HL7, FHIR, Java 21, Spring 5. Contributors welcome!

Java

#beginner-friendly#contributions-welcome#devcontainer#digital-health#ehr#electronic-medical-records#emr#fhir#good-first-issue#healthcare#hibernate#hl7#java#jsp#mariadb#maven#open-source#spring-boot#tomcat#webapp

maintenance: demographic 2Actions use SpringUtils.getBean field shims — migrate to constructor injection 7 days ago

help wanted type: security Enhancement Review effort [1-5]: 3 type: enhancement priority: low

carlos-emr/carlos

25

Open-source Electronic Medical Records (EMR) for Canadian healthcare — HL7, FHIR, Java 21, Spring 5. Contributors welcome!

Java

#beginner-friendly#contributions-welcome#devcontainer#digital-health#ehr#electronic-medical-records#emr#fhir#good-first-issue#healthcare#hibernate#hl7#java#jsp#mariadb#maven#open-source#spring-boot#tomcat#webapp

Make fax preview preparation POST-only as defense in depth 7 days ago

help wanted type: security Enhancement Review effort [1-5]: 3 type: enhancement priority: low

carlos-emr/carlos

25

Open-source Electronic Medical Records (EMR) for Canadian healthcare — HL7, FHIR, Java 21, Spring 5. Contributors welcome!

Java

#beginner-friendly#contributions-welcome#devcontainer#digital-health#ehr#electronic-medical-records#emr#fhir#good-first-issue#healthcare#hibernate#hl7#java#jsp#mariadb#maven#open-source#spring-boot#tomcat#webapp

[Bug] scheduleflipview.jsp and scheduledatepopup.jsp: JSP class-level instance variables shared across concurrent requests (claude assist) 7 days ago

help wanted good first issue type: bug Review effort [1-5]: 1 technical debt type: technical-debt priority: low

carlos-emr/carlos

25

Open-source Electronic Medical Records (EMR) for Canadian healthcare — HL7, FHIR, Java 21, Spring 5. Contributors welcome!

Java

#beginner-friendly#contributions-welcome#devcontainer#digital-health#ehr#electronic-medical-records#emr#fhir#good-first-issue#healthcare#hibernate#hl7#java#jsp#mariadb#maven#open-source#spring-boot#tomcat#webapp

[Bug] EConsult2Action: frontend()/login() return null instead of NONE after redirect; redundant isValidTask protocol check 7 days ago

help wanted good first issue type: bug technical debt type: technical-debt priority: low

carlos-emr/carlos

25

Open-source Electronic Medical Records (EMR) for Canadian healthcare — HL7, FHIR, Java 21, Spring 5. Contributors welcome!

Java

#beginner-friendly#contributions-welcome#devcontainer#digital-health#ehr#electronic-medical-records#emr#fhir#good-first-issue#healthcare#hibernate#hl7#java#jsp#mariadb#maven#open-source#spring-boot#tomcat#webapp

Tickler Manager: edit-tickler pop-up default size is too small, forcing scrolling 7 days ago

good first issue Review effort [1-5]: 2 type: enhancement priority: low

carlos-emr/carlos

25

Open-source Electronic Medical Records (EMR) for Canadian healthcare — HL7, FHIR, Java 21, Spring 5. Contributors welcome!

Java

#beginner-friendly#contributions-welcome#devcontainer#digital-health#ehr#electronic-medical-records#emr#fhir#good-first-issue#healthcare#hibernate#hl7#java#jsp#mariadb#maven#open-source#spring-boot#tomcat#webapp

Patient search pop-up: magnifying glass icon crosses the top container border 7 days ago

good first issue type: bug Review effort [1-5]: 2 type: enhancement priority: low

carlos-emr/carlos

25

Open-source Electronic Medical Records (EMR) for Canadian healthcare — HL7, FHIR, Java 21, Spring 5. Contributors welcome!

Java

#beginner-friendly#contributions-welcome#devcontainer#digital-health#ehr#electronic-medical-records#emr#fhir#good-first-issue#healthcare#hibernate#hl7#java#jsp#mariadb#maven#open-source#spring-boot#tomcat#webapp

Schedule billing pop-up: '?' and edit icons at the top do nothing; redundant 'edit' link beside the edit icon 7 days ago

good first issue type: bug Review effort [1-5]: 2 priority: low

carlos-emr/carlos

25

Open-source Electronic Medical Records (EMR) for Canadian healthcare — HL7, FHIR, Java 21, Spring 5. Contributors welcome!

Java

#beginner-friendly#contributions-welcome#devcontainer#digital-health#ehr#electronic-medical-records#emr#fhir#good-first-issue#healthcare#hibernate#hl7#java#jsp#mariadb#maven#open-source#spring-boot#tomcat#webapp

(codex assist) Audit local sanitizeFileName helpers after PR #2092 9 days ago

help wanted discussion type: security Review effort [1-5]: 3 priority: low

carlos-emr/carlos

25

Open-source Electronic Medical Records (EMR) for Canadian healthcare — HL7, FHIR, Java 21, Spring 5. Contributors welcome!

Java

#beginner-friendly#contributions-welcome#devcontainer#digital-health#ehr#electronic-medical-records#emr#fhir#good-first-issue#healthcare#hibernate#hl7#java#jsp#mariadb#maven#open-source#spring-boot#tomcat#webapp

MeasurementGraphAction22Action: make labType checks null-safe in plus-meds chart 11 days ago

help wanted good first issue type: bug Review effort [1-5]: 2 priority: low

carlos-emr/carlos

25

Open-source Electronic Medical Records (EMR) for Canadian healthcare — HL7, FHIR, Java 21, Spring 5. Contributors welcome!

Java

#beginner-friendly#contributions-welcome#devcontainer#digital-health#ehr#electronic-medical-records#emr#fhir#good-first-issue#healthcare#hibernate#hl7#java#jsp#mariadb#maven#open-source#spring-boot#tomcat#webapp

[Bug] CreatePaymentType2Action / UpdatePaymentType2Action return an empty 200 (no JSON body) when required params are missing — client JS gets no error (claude assist) 11 days ago

help wanted good first issue type: bug Review effort [1-5]: 1 priority: low

carlos-emr/carlos

25

Open-source Electronic Medical Records (EMR) for Canadian healthcare — HL7, FHIR, Java 21, Spring 5. Contributors welcome!

Java

#beginner-friendly#contributions-welcome#devcontainer#digital-health#ehr#electronic-medical-records#emr#fhir#good-first-issue#healthcare#hibernate#hl7#java#jsp#mariadb#maven#open-source#spring-boot#tomcat#webapp

[Bug] AddPrevention2Action.validate() — unguarded Integer.parseInt(demographic_no) throws NumberFormatException if parameter is null or non-numeric (claude assist) 12 days ago

help wanted good first issue type: bug Review effort [1-5]: 1 priority: low

carlos-emr/carlos

25

Open-source Electronic Medical Records (EMR) for Canadian healthcare — HL7, FHIR, Java 21, Spring 5. Contributors welcome!

Java

#beginner-friendly#contributions-welcome#devcontainer#digital-health#ehr#electronic-medical-records#emr#fhir#good-first-issue#healthcare#hibernate#hl7#java#jsp#mariadb#maven#open-source#spring-boot#tomcat#webapp

security: Application does not set Content-Security-Policy or Strict-Transport-Security HTTP headers 13 days ago

help wanted good first issue type: security Review effort [1-5]: 2 priority: medium

carlos-emr/carlos

25

Open-source Electronic Medical Records (EMR) for Canadian healthcare — HL7, FHIR, Java 21, Spring 5. Contributors welcome!

Java

#beginner-friendly#contributions-welcome#devcontainer#digital-health#ehr#electronic-medical-records#emr#fhir#good-first-issue#healthcare#hibernate#hl7#java#jsp#mariadb#maven#open-source#spring-boot#tomcat#webapp

[Security] ticklerMain.jsp saveNoteDialog() uses jQuery.ajax() GET for mutation — CSRF bypass and PHI in access logs (claude assist) 13 days ago

help wanted good first issue type: security type: bug Review effort [1-5]: 2 Review effort [1-5]: 1 priority: high

carlos-emr/carlos

25

Open-source Electronic Medical Records (EMR) for Canadian healthcare — HL7, FHIR, Java 21, Spring 5. Contributors welcome!

Java

#beginner-friendly#contributions-welcome#devcontainer#digital-health#ehr#electronic-medical-records#emr#fhir#good-first-issue#healthcare#hibernate#hl7#java#jsp#mariadb#maven#open-source#spring-boot#tomcat#webapp

Demographic findByAttributes wraps every text field in %wildcard% LIKEs (full table scan) 13 days ago

help wanted Enhancement Review effort [1-5]: 3 type: enhancement type: performance priority: medium

carlos-emr/carlos

25

Open-source Electronic Medical Records (EMR) for Canadian healthcare — HL7, FHIR, Java 21, Spring 5. Contributors welcome!

Java

#beginner-friendly#contributions-welcome#devcontainer#digital-health#ehr#electronic-medical-records#emr#fhir#good-first-issue#healthcare#hibernate#hl7#java#jsp#mariadb#maven#open-source#spring-boot#tomcat#webapp

feat: Add JAX-RS exception mappers for REST API error handling 15 days ago

good first issue type: feature priority: low

carlos-emr/carlos

25

Open-source Electronic Medical Records (EMR) for Canadian healthcare — HL7, FHIR, Java 21, Spring 5. Contributors welcome!

Java

#beginner-friendly#contributions-welcome#devcontainer#digital-health#ehr#electronic-medical-records#emr#fhir#good-first-issue#healthcare#hibernate#hl7#java#jsp#mariadb#maven#open-source#spring-boot#tomcat#webapp

Welcome to CARLOS EMR - Start Here 15 days ago

good first issue type: documentation priority: low

carlos-emr/carlos

25

Open-source Electronic Medical Records (EMR) for Canadian healthcare — HL7, FHIR, Java 21, Spring 5. Contributors welcome!

Java

#beginner-friendly#contributions-welcome#devcontainer#digital-health#ehr#electronic-medical-records#emr#fhir#good-first-issue#healthcare#hibernate#hl7#java#jsp#mariadb#maven#open-source#spring-boot#tomcat#webapp

Investigate CSRF token race condition in async csrfTokenFetch.js pattern 15 days ago

help wanted discussion type: security Review effort [1-5]: 2 priority: medium

carlos-emr/carlos

25

Open-source Electronic Medical Records (EMR) for Canadian healthcare — HL7, FHIR, Java 21, Spring 5. Contributors welcome!

Java

#beginner-friendly#contributions-welcome#devcontainer#digital-health#ehr#electronic-medical-records#emr#fhir#good-first-issue#healthcare#hibernate#hl7#java#jsp#mariadb#maven#open-source#spring-boot#tomcat#webapp

Replace MiscUtils.sanitizeFileName with PathValidationUtils across codebase 15 days ago

help wanted good first issue type: security Review effort [1-5]: 3 priority: medium

carlos-emr/carlos

25

Open-source Electronic Medical Records (EMR) for Canadian healthcare — HL7, FHIR, Java 21, Spring 5. Contributors welcome!

Java

#beginner-friendly#contributions-welcome#devcontainer#digital-health#ehr#electronic-medical-records#emr#fhir#good-first-issue#healthcare#hibernate#hl7#java#jsp#mariadb#maven#open-source#spring-boot#tomcat#webapp

perf: convert high-volume EAGER fetch collections to LAZY to reduce heap memory 15 days ago

help wanted Enhancement Review effort [1-5]: 3 type: enhancement type: performance priority: medium

carlos-emr/carlos

25

Open-source Electronic Medical Records (EMR) for Canadian healthcare — HL7, FHIR, Java 21, Spring 5. Contributors welcome!

Java

#beginner-friendly#contributions-welcome#devcontainer#digital-health#ehr#electronic-medical-records#emr#fhir#good-first-issue#healthcare#hibernate#hl7#java#jsp#mariadb#maven#open-source#spring-boot#tomcat#webapp

perf: add Hibernate session clearing to batch operations to prevent heap exhaustion 15 days ago

help wanted Enhancement Review effort [1-5]: 3 type: enhancement type: performance priority: medium

carlos-emr/carlos

25

Open-source Electronic Medical Records (EMR) for Canadian healthcare — HL7, FHIR, Java 21, Spring 5. Contributors welcome!

Java

#beginner-friendly#contributions-welcome#devcontainer#digital-health#ehr#electronic-medical-records#emr#fhir#good-first-issue#healthcare#hibernate#hl7#java#jsp#mariadb#maven#open-source#spring-boot#tomcat#webapp

Investigate: Hibernate 7 JPA 3 Criteria API (Type-Safe Queries) 15 days ago

help wanted type: security Review effort [1-5]: 3 priority: low

carlos-emr/carlos

25

Open-source Electronic Medical Records (EMR) for Canadian healthcare — HL7, FHIR, Java 21, Spring 5. Contributors welcome!

Java

#beginner-friendly#contributions-welcome#devcontainer#digital-health#ehr#electronic-medical-records#emr#fhir#good-first-issue#healthcare#hibernate#hl7#java#jsp#mariadb#maven#open-source#spring-boot#tomcat#webapp

[Feature]: Authentication options 15 days ago

help wanted type: security Review effort [1-5]: 3 priority: low

carlos-emr/carlos

25

Open-source Electronic Medical Records (EMR) for Canadian healthcare — HL7, FHIR, Java 21, Spring 5. Contributors welcome!

Java

#beginner-friendly#contributions-welcome#devcontainer#digital-health#ehr#electronic-medical-records#emr#fhir#good-first-issue#healthcare#hibernate#hl7#java#jsp#mariadb#maven#open-source#spring-boot#tomcat#webapp

[Bug]: Log Report provider dropdown sort is case-sensitive after JPA migration 15 days ago

help wanted good first issue hibernate-6-prep type: bug Review effort [1-5]: 1 priority: low

carlos-emr/carlos

25

Open-source Electronic Medical Records (EMR) for Canadian healthcare — HL7, FHIR, Java 21, Spring 5. Contributors welcome!

Java

#beginner-friendly#contributions-welcome#devcontainer#digital-health#ehr#electronic-medical-records#emr#fhir#good-first-issue#healthcare#hibernate#hl7#java#jsp#mariadb#maven#open-source#spring-boot#tomcat#webapp

(codex assist) Small UI follow-ups for HL7, labs, ticklers, consultations, and administration 15 days ago

help wanted good first issue type: bug Review effort [1-5]: 2 priority: low

carlos-emr/carlos

25

Open-source Electronic Medical Records (EMR) for Canadian healthcare — HL7, FHIR, Java 21, Spring 5. Contributors welcome!

Java

#beginner-friendly#contributions-welcome#devcontainer#digital-health#ehr#electronic-medical-records#emr#fhir#good-first-issue#healthcare#hibernate#hl7#java#jsp#mariadb#maven#open-source#spring-boot#tomcat#webapp

(codex assist) Audit remaining file upload StrutsParameter bindings after PR #2092 15 days ago

help wanted type: security Review effort [1-5]: 3 priority: medium

carlos-emr/carlos

25

Open-source Electronic Medical Records (EMR) for Canadian healthcare — HL7, FHIR, Java 21, Spring 5. Contributors welcome!

Java

#beginner-friendly#contributions-welcome#devcontainer#digital-health#ehr#electronic-medical-records#emr#fhir#good-first-issue#healthcare#hibernate#hl7#java#jsp#mariadb#maven#open-source#spring-boot#tomcat#webapp

(codex assist) Review Hashtable error-map usage in AddEditDocument2Action 15 days ago

help wanted good first issue Review effort [1-5]: 3 type: investigation priority: low

carlos-emr/carlos

25

Open-source Electronic Medical Records (EMR) for Canadian healthcare — HL7, FHIR, Java 21, Spring 5. Contributors welcome!

Java

#beginner-friendly#contributions-welcome#devcontainer#digital-health#ehr#electronic-medical-records#emr#fhir#good-first-issue#healthcare#hibernate#hl7#java#jsp#mariadb#maven#open-source#spring-boot#tomcat#webapp

Umbrella: Technical debt backlog for persistence, JDBC, JPA, and DAO modernization 15 days ago

help wanted hibernate-6-prep Enhancement Review effort [1-5]: 3 type: enhancement type: umbrella priority: low

carlos-emr/carlos

25

Open-source Electronic Medical Records (EMR) for Canadian healthcare — HL7, FHIR, Java 21, Spring 5. Contributors welcome!

Java

#beginner-friendly#contributions-welcome#devcontainer#digital-health#ehr#electronic-medical-records#emr#fhir#good-first-issue#healthcare#hibernate#hl7#java#jsp#mariadb#maven#open-source#spring-boot#tomcat#webapp

Umbrella: Technical debt backlog for Sonar and maintainability cleanup 15 days ago

help wanted Enhancement Review effort [1-5]: 3 codex type: enhancement type: umbrella priority: low

carlos-emr/carlos

25

Open-source Electronic Medical Records (EMR) for Canadian healthcare — HL7, FHIR, Java 21, Spring 5. Contributors welcome!

Java

#beginner-friendly#contributions-welcome#devcontainer#digital-health#ehr#electronic-medical-records#emr#fhir#good-first-issue#healthcare#hibernate#hl7#java#jsp#mariadb#maven#open-source#spring-boot#tomcat#webapp

Umbrella: Architecture backlog for package, module, and naming consolidation 15 days ago

help wanted Enhancement Review effort [1-5]: 3 type: enhancement type: umbrella priority: low

carlos-emr/carlos

25

Open-source Electronic Medical Records (EMR) for Canadian healthcare — HL7, FHIR, Java 21, Spring 5. Contributors welcome!

Java

#beginner-friendly#contributions-welcome#devcontainer#digital-health#ehr#electronic-medical-records#emr#fhir#good-first-issue#healthcare#hibernate#hl7#java#jsp#mariadb#maven#open-source#spring-boot#tomcat#webapp

Umbrella: Security tooling evaluation backlog 15 days ago

help wanted type: security priority: low

carlos-emr/carlos

25

Open-source Electronic Medical Records (EMR) for Canadian healthcare — HL7, FHIR, Java 21, Spring 5. Contributors welcome!

Java

#beginner-friendly#contributions-welcome#devcontainer#digital-health#ehr#electronic-medical-records#emr#fhir#good-first-issue#healthcare#hibernate#hl7#java#jsp#mariadb#maven#open-source#spring-boot#tomcat#webapp

Umbrella: Security headers and browser hardening backlog 15 days ago

help wanted type: security Review effort [1-5]: 3 priority: low

carlos-emr/carlos

25

Open-source Electronic Medical Records (EMR) for Canadian healthcare — HL7, FHIR, Java 21, Spring 5. Contributors welcome!

Java

#beginner-friendly#contributions-welcome#devcontainer#digital-health#ehr#electronic-medical-records#emr#fhir#good-first-issue#healthcare#hibernate#hl7#java#jsp#mariadb#maven#open-source#spring-boot#tomcat#webapp

Umbrella: UI shell and navigation cleanup backlog 15 days ago

help wanted type: bug Review effort [1-5]: 2 priority: low

carlos-emr/carlos

25

Open-source Electronic Medical Records (EMR) for Canadian healthcare — HL7, FHIR, Java 21, Spring 5. Contributors welcome!

Java

#beginner-friendly#contributions-welcome#devcontainer#digital-health#ehr#electronic-medical-records#emr#fhir#good-first-issue#healthcare#hibernate#hl7#java#jsp#mariadb#maven#open-source#spring-boot#tomcat#webapp

Umbrella: Frontend modernization backlog 15 days ago

help wanted Enhancement Review effort [1-5]: 3 type: enhancement type: umbrella priority: low

carlos-emr/carlos

25

Open-source Electronic Medical Records (EMR) for Canadian healthcare — HL7, FHIR, Java 21, Spring 5. Contributors welcome!

Java

#beginner-friendly#contributions-welcome#devcontainer#digital-health#ehr#electronic-medical-records#emr#fhir#good-first-issue#healthcare#hibernate#hl7#java#jsp#mariadb#maven#open-source#spring-boot#tomcat#webapp

Umbrella: Security review verification backlog 15 days ago

help wanted type: security priority: low

carlos-emr/carlos

25

Open-source Electronic Medical Records (EMR) for Canadian healthcare — HL7, FHIR, Java 21, Spring 5. Contributors welcome!

Java

#beginner-friendly#contributions-welcome#devcontainer#digital-health#ehr#electronic-medical-records#emr#fhir#good-first-issue#healthcare#hibernate#hl7#java#jsp#mariadb#maven#open-source#spring-boot#tomcat#webapp

(claude assist) Retire direct GenericDownload endpoint 15 days ago

help wanted type: security Review effort [1-5]: 3 priority: medium

carlos-emr/carlos

25

Open-source Electronic Medical Records (EMR) for Canadian healthcare — HL7, FHIR, Java 21, Spring 5. Contributors welcome!

Java

#beginner-friendly#contributions-welcome#devcontainer#digital-health#ehr#electronic-medical-records#emr#fhir#good-first-issue#healthcare#hibernate#hl7#java#jsp#mariadb#maven#open-source#spring-boot#tomcat#webapp

Add LogSanitizer and UploadedFileUtils utilities; sanitize filename logging in EDocUtil 15 days ago

help wanted good first issue type: security Review effort [1-5]: 3 priority: low

carlos-emr/carlos

25

Open-source Electronic Medical Records (EMR) for Canadian healthcare — HL7, FHIR, Java 21, Spring 5. Contributors welcome!

Java

#beginner-friendly#contributions-welcome#devcontainer#digital-health#ehr#electronic-medical-records#emr#fhir#good-first-issue#healthcare#hibernate#hl7#java#jsp#mariadb#maven#open-source#spring-boot#tomcat#webapp

test: add LoginCheckLoginBean unit tests for null-session, timing-equalization, and forced-reset paths (claude assist) 15 days ago

help wanted good first issue type: security Review effort [1-5]: 3 priority: low

carlos-emr/carlos

25

Open-source Electronic Medical Records (EMR) for Canadian healthcare — HL7, FHIR, Java 21, Spring 5. Contributors welcome!

Java

#beginner-friendly#contributions-welcome#devcontainer#digital-health#ehr#electronic-medical-records#emr#fhir#good-first-issue#healthcare#hibernate#hl7#java#jsp#mariadb#maven#open-source#spring-boot#tomcat#webapp

[Security] XSS defense-in-depth — image filename unencoded in eform/efmimagemanager.jsp (claude assist) 15 days ago

help wanted good first issue type: security Review effort [1-5]: 2 priority: low

carlos-emr/carlos

25

Open-source Electronic Medical Records (EMR) for Canadian healthcare — HL7, FHIR, Java 21, Spring 5. Contributors welcome!

Java

#beginner-friendly#contributions-welcome#devcontainer#digital-health#ehr#electronic-medical-records#emr#fhir#good-first-issue#healthcare#hibernate#hl7#java#jsp#mariadb#maven#open-source#spring-boot#tomcat#webapp

[Security] PHI-correlating identifier logged without LogSafe in SpireLabTest.java (claude assist) 15 days ago

help wanted good first issue type: security Review effort [1-5]: 2 priority: low

carlos-emr/carlos

25

Open-source Electronic Medical Records (EMR) for Canadian healthcare — HL7, FHIR, Java 21, Spring 5. Contributors welcome!

Java

#beginner-friendly#contributions-welcome#devcontainer#digital-health#ehr#electronic-medical-records#emr#fhir#good-first-issue#healthcare#hibernate#hl7#java#jsp#mariadb#maven#open-source#spring-boot#tomcat#webapp

[Security] XSS — encounter print pages render CPP clinical fields without HTML encoding (claude assist) 15 days ago

help wanted good first issue type: security Review effort [1-5]: 2 priority: medium

carlos-emr/carlos

25

Open-source Electronic Medical Records (EMR) for Canadian healthcare — HL7, FHIR, Java 21, Spring 5. Contributors welcome!

Java

#beginner-friendly#contributions-welcome#devcontainer#digital-health#ehr#electronic-medical-records#emr#fhir#good-first-issue#healthcare#hibernate#hl7#java#jsp#mariadb#maven#open-source#spring-boot#tomcat#webapp

[Security] XSS — encounter concurrencyError.jsp renders clinical note in <textarea> without encoding (claude assist) 15 days ago

help wanted good first issue type: security Review effort [1-5]: 2 priority: medium

carlos-emr/carlos

25

Open-source Electronic Medical Records (EMR) for Canadian healthcare — HL7, FHIR, Java 21, Spring 5. Contributors welcome!

Java

#beginner-friendly#contributions-welcome#devcontainer#digital-health#ehr#electronic-medical-records#emr#fhir#good-first-issue#healthcare#hibernate#hl7#java#jsp#mariadb#maven#open-source#spring-boot#tomcat#webapp

[Security] XSS — ViewAttachment.jsp renders message subject, sender and body without HTML encoding (claude assist) 15 days ago

help wanted good first issue type: security Review effort [1-5]: 2 priority: medium

carlos-emr/carlos

25

Open-source Electronic Medical Records (EMR) for Canadian healthcare — HL7, FHIR, Java 21, Spring 5. Contributors welcome!

Java

#beginner-friendly#contributions-welcome#devcontainer#digital-health#ehr#electronic-medical-records#emr#fhir#good-first-issue#healthcare#hibernate#hl7#java#jsp#mariadb#maven#open-source#spring-boot#tomcat#webapp

[Security] XSS — BC billing correction review and receipt pages render patient PHI without HTML encoding (claude assist) 15 days ago

help wanted good first issue type: security Review effort [1-5]: 2 priority: medium

carlos-emr/carlos

25

Open-source Electronic Medical Records (EMR) for Canadian healthcare — HL7, FHIR, Java 21, Spring 5. Contributors welcome!

Java

#beginner-friendly#contributions-welcome#devcontainer#digital-health#ehr#electronic-medical-records#emr#fhir#good-first-issue#healthcare#hibernate#hl7#java#jsp#mariadb#maven#open-source#spring-boot#tomcat#webapp

[Security] XSS — SideLinksEditFavorites2.jsp renders provider-created favorite names without HTML encoding (claude assist) 15 days ago

help wanted good first issue type: security Review effort [1-5]: 2 priority: medium

carlos-emr/carlos

25

Open-source Electronic Medical Records (EMR) for Canadian healthcare — HL7, FHIR, Java 21, Spring 5. Contributors welcome!

Java

#beginner-friendly#contributions-welcome#devcontainer#digital-health#ehr#electronic-medical-records#emr#fhir#good-first-issue#healthcare#hibernate#hl7#java#jsp#mariadb#maven#open-source#spring-boot#tomcat#webapp

chore: consider improving popup blocker compatibility for async window.open calls (claude assist) 15 days ago

help wanted good first issue type: bug Review effort [1-5]: 2 priority: low

carlos-emr/carlos

25

Open-source Electronic Medical Records (EMR) for Canadian healthcare — HL7, FHIR, Java 21, Spring 5. Contributors welcome!

Java

#beginner-friendly#contributions-welcome#devcontainer#digital-health#ehr#electronic-medical-records#emr#fhir#good-first-issue#healthcare#hibernate#hl7#java#jsp#mariadb#maven#open-source#spring-boot#tomcat#webapp

chore: consider auditing browser security compatibility beyond popup blockers (claude assist) 15 days ago

help wanted good first issue type: security Review effort [1-5]: 2 priority: low

carlos-emr/carlos

25

Open-source Electronic Medical Records (EMR) for Canadian healthcare — HL7, FHIR, Java 21, Spring 5. Contributors welcome!

Java

#beginner-friendly#contributions-welcome#devcontainer#digital-health#ehr#electronic-medical-records#emr#fhir#good-first-issue#healthcare#hibernate#hl7#java#jsp#mariadb#maven#open-source#spring-boot#tomcat#webapp

DrugrefUtil: debug artifacts and PHI-correlating data (DINs, ATC codes) logged at ERROR level 15 days ago

help wanted type: security Review effort [1-5]: 3 priority: low

carlos-emr/carlos

25

Open-source Electronic Medical Records (EMR) for Canadian healthcare — HL7, FHIR, Java 21, Spring 5. Contributors welcome!

Java

#beginner-friendly#contributions-welcome#devcontainer#digital-health#ehr#electronic-medical-records#emr#fhir#good-first-issue#healthcare#hibernate#hl7#java#jsp#mariadb#maven#open-source#spring-boot#tomcat#webapp

forcepasswordreset.jsp: replace JavaScriptUtils.javaScriptEscape() with SafeEncode.forJavaScript() (claude assist) 15 days ago

help wanted good first issue type: security Review effort [1-5]: 2 priority: low

carlos-emr/carlos

25

Open-source Electronic Medical Records (EMR) for Canadian healthcare — HL7, FHIR, Java 21, Spring 5. Contributors welcome!

Java

#beginner-friendly#contributions-welcome#devcontainer#digital-health#ehr#electronic-medical-records#emr#fhir#good-first-issue#healthcare#hibernate#hl7#java#jsp#mariadb#maven#open-source#spring-boot#tomcat#webapp

UploadLoginText2Action: mutator accepts GET — no HTTP-method check, missing from contract test (claude assist) 15 days ago

help wanted good first issue type: security Review effort [1-5]: 2 priority: medium

carlos-emr/carlos

25

Open-source Electronic Medical Records (EMR) for Canadian healthcare — HL7, FHIR, Java 21, Spring 5. Contributors welcome!

Java

#beginner-friendly#contributions-welcome#devcontainer#digital-health#ehr#electronic-medical-records#emr#fhir#good-first-issue#healthcare#hibernate#hl7#java#jsp#mariadb#maven#open-source#spring-boot#tomcat#webapp

LoginCheckLoginBean: Encode.forHtmlContent() wrong wrapper and wrong sanitization context in audit log calls 15 days ago

help wanted good first issue type: security Review effort [1-5]: 1 priority: low

carlos-emr/carlos

25

Open-source Electronic Medical Records (EMR) for Canadian healthcare — HL7, FHIR, Java 21, Spring 5. Contributors welcome!

Java

#beginner-friendly#contributions-welcome#devcontainer#digital-health#ehr#electronic-medical-records#emr#fhir#good-first-issue#healthcare#hibernate#hl7#java#jsp#mariadb#maven#open-source#spring-boot#tomcat#webapp

Login JSPs: stale <e:> taglib imports and dead-code location dropdown in location.jsp 15 days ago

help wanted good first issue type: security type: bug Review effort [1-5]: 1 priority: low

carlos-emr/carlos

25

Open-source Electronic Medical Records (EMR) for Canadian healthcare — HL7, FHIR, Java 21, Spring 5. Contributors welcome!

Java

#beginner-friendly#contributions-welcome#devcontainer#digital-health#ehr#electronic-medical-records#emr#fhir#good-first-issue#healthcare#hibernate#hl7#java#jsp#mariadb#maven#open-source#spring-boot#tomcat#webapp

mfa_registration.jsp: qrData rendered into img src without CARLOS encoding wrapper 15 days ago

help wanted good first issue type: security Review effort [1-5]: 1 Nice priority: low

carlos-emr/carlos

25

Open-source Electronic Medical Records (EMR) for Canadian healthcare — HL7, FHIR, Java 21, Spring 5. Contributors welcome!

Java

#beginner-friendly#contributions-welcome#devcontainer#digital-health#ehr#electronic-medical-records#emr#fhir#good-first-issue#healthcare#hibernate#hl7#java#jsp#mariadb#maven#open-source#spring-boot#tomcat#webapp

Login2Action: failed authentication attempts not written to log_action audit table 15 days ago

help wanted type: security Review effort [1-5]: 3 priority: low

carlos-emr/carlos

25

Open-source Electronic Medical Records (EMR) for Canadian healthcare — HL7, FHIR, Java 21, Spring 5. Contributors welcome!

Java

#beginner-friendly#contributions-welcome#devcontainer#digital-health#ehr#electronic-medical-records#emr#fhir#good-first-issue#healthcare#hibernate#hl7#java#jsp#mariadb#maven#open-source#spring-boot#tomcat#webapp

JavaMelody system-actions-enabled=true allows heap dump via monitoring role credentials 15 days ago

help wanted type: security Review effort [1-5]: 3 priority: medium

carlos-emr/carlos

25

Open-source Electronic Medical Records (EMR) for Canadian healthcare — HL7, FHIR, Java 21, Spring 5. Contributors welcome!

Java

#beginner-friendly#contributions-welcome#devcontainer#digital-health#ehr#electronic-medical-records#emr#fhir#good-first-issue#healthcare#hibernate#hl7#java#jsp#mariadb#maven#open-source#spring-boot#tomcat#webapp

MFA JSP fragments contain invalid nested HTML structure (claude assist) 15 days ago

good first issue type: bug Review effort [1-5]: 1 priority: low

carlos-emr/carlos

25

Open-source Electronic Medical Records (EMR) for Canadian healthcare — HL7, FHIR, Java 21, Spring 5. Contributors welcome!

Java

#beginner-friendly#contributions-welcome#devcontainer#digital-health#ehr#electronic-medical-records#emr#fhir#good-first-issue#healthcare#hibernate#hl7#java#jsp#mariadb#maven#open-source#spring-boot#tomcat#webapp

securityupdatesecurity.jsp: unguarded Integer.valueOf() on keyword parameter (same pattern as #2341) (claude assist) 15 days ago

help wanted good first issue type: security type: bug Review effort [1-5]: 2 priority: low

carlos-emr/carlos

25

Open-source Electronic Medical Records (EMR) for Canadian healthcare — HL7, FHIR, Java 21, Spring 5. Contributors welcome!

Java

#beginner-friendly#contributions-welcome#devcontainer#digital-health#ehr#electronic-medical-records#emr#fhir#good-first-issue#healthcare#hibernate#hl7#java#jsp#mariadb#maven#open-source#spring-boot#tomcat#webapp

securityupdate.jsp admin MFA enable/disable bypasses SecurityManager security-record archiving (claude assist) 15 days ago

help wanted good first issue type: security type: bug Review effort [1-5]: 2 priority: medium

carlos-emr/carlos

25

Open-source Electronic Medical Records (EMR) for Canadian healthcare — HL7, FHIR, Java 21, Spring 5. Contributors welcome!

Java

#beginner-friendly#contributions-welcome#devcontainer#digital-health#ehr#electronic-medical-records#emr#fhir#good-first-issue#healthcare#hibernate#hl7#java#jsp#mariadb#maven#open-source#spring-boot#tomcat#webapp

Admin MFA disable does not clear mfaSecret; re-enable silently reuses stale secret (claude assist) 15 days ago

help wanted good first issue type: security type: bug Review effort [1-5]: 1 priority: medium

carlos-emr/carlos

25

Open-source Electronic Medical Records (EMR) for Canadian healthcare — HL7, FHIR, Java 21, Spring 5. Contributors welcome!

Java

#beginner-friendly#contributions-welcome#devcontainer#digital-health#ehr#electronic-medical-records#emr#fhir#good-first-issue#healthcare#hibernate#hl7#java#jsp#mariadb#maven#open-source#spring-boot#tomcat#webapp

security: TOTP MFA validation has no used-code tracking — same code reusable within ±90s window (claude assist) 15 days ago

help wanted type: security type: bug Review effort [1-5]: 2 priority: medium

carlos-emr/carlos

25

Open-source Electronic Medical Records (EMR) for Canadian healthcare — HL7, FHIR, Java 21, Spring 5. Contributors welcome!

Java

#beginner-friendly#contributions-welcome#devcontainer#digital-health#ehr#electronic-medical-records#emr#fhir#good-first-issue#healthcare#hibernate#hl7#java#jsp#mariadb#maven#open-source#spring-boot#tomcat#webapp

security: CarlosCsrfGuardFilter swallows token-generation exceptions — degrades to unexplained 403 on next submit (claude assist) 15 days ago

help wanted good first issue type: security Review effort [1-5]: 1 priority: low

carlos-emr/carlos

25

Open-source Electronic Medical Records (EMR) for Canadian healthcare — HL7, FHIR, Java 21, Spring 5. Contributors welcome!

Java

#beginner-friendly#contributions-welcome#devcontainer#digital-health#ehr#electronic-medical-records#emr#fhir#good-first-issue#healthcare#hibernate#hl7#java#jsp#mariadb#maven#open-source#spring-boot#tomcat#webapp

Open Issues Need Help