carlos-emr/carlos

[Umbrella] Case/eChart/consultation hardening sweep about 6 hours ago

help wanted type: security

25

Open-source Electronic Medical Records (EMR) for Canadian healthcare — HL7, FHIR, Java 21, Spring 5. Contributors welcome!

Java

#beginner-friendly#contributions-welcome#devcontainer#digital-health#ehr#electronic-medical-records#emr#fhir#good-first-issue#healthcare#hibernate#hl7#java#jsp#mariadb#maven#open-source#spring-boot#tomcat#webapp

OSCAR19 apconfig compatibility gaps blocked by removed or unproven CARLOS backends about 24 hours ago

help wanted Enhancement

carlos-emr/carlos

25

Open-source Electronic Medical Records (EMR) for Canadian healthcare — HL7, FHIR, Java 21, Spring 5. Contributors welcome!

Java

#beginner-friendly#contributions-welcome#devcontainer#digital-health#ehr#electronic-medical-records#emr#fhir#good-first-issue#healthcare#hibernate#hl7#java#jsp#mariadb#maven#open-source#spring-boot#tomcat#webapp

fix(security): email send leaves patient PDF temp files on disk indefinitely — add per-send cleanup and orphan sweep 1 day ago

help wanted type: security type: bug Review effort [1-5]: 2

carlos-emr/carlos

25

Open-source Electronic Medical Records (EMR) for Canadian healthcare — HL7, FHIR, Java 21, Spring 5. Contributors welcome!

Java

#beginner-friendly#contributions-welcome#devcontainer#digital-health#ehr#electronic-medical-records#emr#fhir#good-first-issue#healthcare#hibernate#hl7#java#jsp#mariadb#maven#open-source#spring-boot#tomcat#webapp

[Security] ScatterPlotChartServlet: no SecurityInfoManager.hasPrivilege() check — any authenticated user can retrieve any patient's measurement chart (claude assist) 1 day ago

help wanted type: security type: bug Review effort [1-5]: 3

carlos-emr/carlos

25

Open-source Electronic Medical Records (EMR) for Canadian healthcare — HL7, FHIR, Java 21, Spring 5. Contributors welcome!

Java

#beginner-friendly#contributions-welcome#devcontainer#digital-health#ehr#electronic-medical-records#emr#fhir#good-first-issue#healthcare#hibernate#hl7#java#jsp#mariadb#maven#open-source#spring-boot#tomcat#webapp

(claude assist) Retire or gate the oscarRxFax mutation in FrmCustomedPDFServlet 1 day ago

help wanted type: security Review effort [1-5]: 2 Review effort [1-5]: 3

carlos-emr/carlos

25

Open-source Electronic Medical Records (EMR) for Canadian healthcare — HL7, FHIR, Java 21, Spring 5. Contributors welcome!

Java

#beginner-friendly#contributions-welcome#devcontainer#digital-health#ehr#electronic-medical-records#emr#fhir#good-first-issue#healthcare#hibernate#hl7#java#jsp#mariadb#maven#open-source#spring-boot#tomcat#webapp

[Security] Standardize demographic-scoped authorization across JAX-RS REST endpoints (role-level vs patient-scoped hasPrivilege) 1 day ago

help wanted type: security type: bug Review effort [1-5]: 2

carlos-emr/carlos

25

Open-source Electronic Medical Records (EMR) for Canadian healthcare — HL7, FHIR, Java 21, Spring 5. Contributors welcome!

Java

#beginner-friendly#contributions-welcome#devcontainer#digital-health#ehr#electronic-medical-records#emr#fhir#good-first-issue#healthcare#hibernate#hl7#java#jsp#mariadb#maven#open-source#spring-boot#tomcat#webapp

[Security] RxWebService: direct drug sub-path endpoints bypass privilege check; represcribe() and recordPrescriptionPrint() unprotected (claude assist) 2 days ago

help wanted good first issue type: security type: bug Review effort [1-5]: 2

carlos-emr/carlos

25

Open-source Electronic Medical Records (EMR) for Canadian healthcare — HL7, FHIR, Java 21, Spring 5. Contributors welcome!

Java

#beginner-friendly#contributions-welcome#devcontainer#digital-health#ehr#electronic-medical-records#emr#fhir#good-first-issue#healthcare#hibernate#hl7#java#jsp#mariadb#maven#open-source#spring-boot#tomcat#webapp

[Security] NotesService.getIssueNote() IDOR — clinical note content accessible by bare note ID without ownership check (claude assist) 2 days ago

help wanted good first issue type: security type: bug Review effort [1-5]: 1

carlos-emr/carlos

25

Open-source Electronic Medical Records (EMR) for Canadian healthcare — HL7, FHIR, Java 21, Spring 5. Contributors welcome!

Java

#beginner-friendly#contributions-welcome#devcontainer#digital-health#ehr#electronic-medical-records#emr#fhir#good-first-issue#healthcare#hibernate#hl7#java#jsp#mariadb#maven#open-source#spring-boot#tomcat#webapp

[Security] Cross-patient allergy archive/activate — allergy ID not bound to session patient (claude assist) 2 days ago

help wanted good first issue blocker type: security type: bug Review effort [1-5]: 2

carlos-emr/carlos

25

Open-source Electronic Medical Records (EMR) for Canadian healthcare — HL7, FHIR, Java 21, Spring 5. Contributors welcome!

Java

#beginner-friendly#contributions-welcome#devcontainer#digital-health#ehr#electronic-medical-records#emr#fhir#good-first-issue#healthcare#hibernate#hl7#java#jsp#mariadb#maven#open-source#spring-boot#tomcat#webapp

[Bug]: new encounter header is not i18n 2 days ago

good first issue type: bug Review effort [1-5]: 1

carlos-emr/carlos

25

Open-source Electronic Medical Records (EMR) for Canadian healthcare — HL7, FHIR, Java 21, Spring 5. Contributors welcome!

Java

#beginner-friendly#contributions-welcome#devcontainer#digital-health#ehr#electronic-medical-records#emr#fhir#good-first-issue#healthcare#hibernate#hl7#java#jsp#mariadb#maven#open-source#spring-boot#tomcat#webapp

Hardening: replace fragile `ret.length() < 8` column-separator heuristic in RptReportCreator.getSelectField 5 days ago

good first issue type: bug Nice technical debt

carlos-emr/carlos

25

Open-source Electronic Medical Records (EMR) for Canadian healthcare — HL7, FHIR, Java 21, Spring 5. Contributors welcome!

Java

#beginner-friendly#contributions-welcome#devcontainer#digital-health#ehr#electronic-medical-records#emr#fhir#good-first-issue#healthcare#hibernate#hl7#java#jsp#mariadb#maven#open-source#spring-boot#tomcat#webapp

Security: audit request-sourced identity parameters that should come from the session 9 days ago

help wanted type: security Review effort [1-5]: 3

carlos-emr/carlos

25

Open-source Electronic Medical Records (EMR) for Canadian healthcare — HL7, FHIR, Java 21, Spring 5. Contributors welcome!

Java

#beginner-friendly#contributions-welcome#devcontainer#digital-health#ehr#electronic-medical-records#emr#fhir#good-first-issue#healthcare#hibernate#hl7#java#jsp#mariadb#maven#open-source#spring-boot#tomcat#webapp

[Security] OAuth 1.0a scopes are never enforced — any token grants full provider API access (claude assist) 9 days ago

help wanted type: security Review effort [1-5]: 3

carlos-emr/carlos

25

Open-source Electronic Medical Records (EMR) for Canadian healthcare — HL7, FHIR, Java 21, Spring 5. Contributors welcome!

Java

#beginner-friendly#contributions-welcome#devcontainer#digital-health#ehr#electronic-medical-records#emr#fhir#good-first-issue#healthcare#hibernate#hl7#java#jsp#mariadb#maven#open-source#spring-boot#tomcat#webapp

[Maintenance] SecurityException messages in ClientImage2Action and EctInsertTemplate2Action use non-canonical format (claude assist) 9 days ago

help wanted good first issue type: security Review effort [1-5]: 2

carlos-emr/carlos

25

Open-source Electronic Medical Records (EMR) for Canadian healthcare — HL7, FHIR, Java 21, Spring 5. Contributors welcome!

Java

#beginner-friendly#contributions-welcome#devcontainer#digital-health#ehr#electronic-medical-records#emr#fhir#good-first-issue#healthcare#hibernate#hl7#java#jsp#mariadb#maven#open-source#spring-boot#tomcat#webapp

[Bug]: Schedule Tab Shows 2 "Security Exception" on new account without admin. 9 days ago

help wanted type: bug Review effort [1-5]: 2

carlos-emr/carlos

25

Open-source Electronic Medical Records (EMR) for Canadian healthcare — HL7, FHIR, Java 21, Spring 5. Contributors welcome!

Java

#beginner-friendly#contributions-welcome#devcontainer#digital-health#ehr#electronic-medical-records#emr#fhir#good-first-issue#healthcare#hibernate#hl7#java#jsp#mariadb#maven#open-source#spring-boot#tomcat#webapp

[Security] ProviderService.saveProviderSettings() IDOR — any authenticated user can overwrite any provider's settings (claude assist) 9 days ago

help wanted good first issue type: security type: bug Review effort [1-5]: 2

carlos-emr/carlos

25

Open-source Electronic Medical Records (EMR) for Canadian healthcare — HL7, FHIR, Java 21, Spring 5. Contributors welcome!

Java

#beginner-friendly#contributions-welcome#devcontainer#digital-health#ehr#electronic-medical-records#emr#fhir#good-first-issue#healthcare#hibernate#hl7#java#jsp#mariadb#maven#open-source#spring-boot#tomcat#webapp

[Security] Missing securityInfoManager.hasPrivilege() across JAX-RS REST services — any authenticated user can invoke most endpoints (claude assist) 9 days ago

help wanted good first issue type: security type: bug Review effort [1-5]: 2

carlos-emr/carlos

25

Open-source Electronic Medical Records (EMR) for Canadian healthcare — HL7, FHIR, Java 21, Spring 5. Contributors welcome!

Java

#beginner-friendly#contributions-welcome#devcontainer#digital-health#ehr#electronic-medical-records#emr#fhir#good-first-issue#healthcare#hibernate#hl7#java#jsp#mariadb#maven#open-source#spring-boot#tomcat#webapp

MFA JSP fragments contain invalid nested HTML structure (claude assist) 10 days ago

good first issue type: bug Review effort [1-5]: 1

carlos-emr/carlos

25

Open-source Electronic Medical Records (EMR) for Canadian healthcare — HL7, FHIR, Java 21, Spring 5. Contributors welcome!

Java

#beginner-friendly#contributions-welcome#devcontainer#digital-health#ehr#electronic-medical-records#emr#fhir#good-first-issue#healthcare#hibernate#hl7#java#jsp#mariadb#maven#open-source#spring-boot#tomcat#webapp

[Bug] EConsult2Action: frontend()/login() return null instead of NONE after redirect; redundant isValidTask protocol check 12 days ago

help wanted good first issue type: bug technical debt

carlos-emr/carlos

25

Open-source Electronic Medical Records (EMR) for Canadian healthcare — HL7, FHIR, Java 21, Spring 5. Contributors welcome!

Java

#beginner-friendly#contributions-welcome#devcontainer#digital-health#ehr#electronic-medical-records#emr#fhir#good-first-issue#healthcare#hibernate#hl7#java#jsp#mariadb#maven#open-source#spring-boot#tomcat#webapp

bug: RourkeExport2Action uses a shared XML filename and continues on save failure — cross-patient PHI risk 12 days ago

help wanted type: security type: bug Review effort [1-5]: 2

carlos-emr/carlos

25

Open-source Electronic Medical Records (EMR) for Canadian healthcare — HL7, FHIR, Java 21, Spring 5. Contributors welcome!

Java

#beginner-friendly#contributions-welcome#devcontainer#digital-health#ehr#electronic-medical-records#emr#fhir#good-first-issue#healthcare#hibernate#hl7#java#jsp#mariadb#maven#open-source#spring-boot#tomcat#webapp

bug: PrintDemoChartLabel2Action label load does not catch SecurityException from resolveTrustedPath (skips fallback) 12 days ago

help wanted type: bug Review effort [1-5]: 1

carlos-emr/carlos

25

Open-source Electronic Medical Records (EMR) for Canadian healthcare — HL7, FHIR, Java 21, Spring 5. Contributors welcome!

Java

#beginner-friendly#contributions-welcome#devcontainer#digital-health#ehr#electronic-medical-records#emr#fhir#good-first-issue#healthcare#hibernate#hl7#java#jsp#mariadb#maven#open-source#spring-boot#tomcat#webapp

bug: ImportDemographicDataAction42Action returns SUCCESS after writing direct JSON response (should return NONE) 12 days ago

help wanted type: bug Review effort [1-5]: 1

carlos-emr/carlos

25

Open-source Electronic Medical Records (EMR) for Canadian healthcare — HL7, FHIR, Java 21, Spring 5. Contributors welcome!

Java

#beginner-friendly#contributions-welcome#devcontainer#digital-health#ehr#electronic-medical-records#emr#fhir#good-first-issue#healthcare#hibernate#hl7#java#jsp#mariadb#maven#open-source#spring-boot#tomcat#webapp

Umbrella: Security review verification backlog 12 days ago

help wanted type: security

carlos-emr/carlos

25

Open-source Electronic Medical Records (EMR) for Canadian healthcare — HL7, FHIR, Java 21, Spring 5. Contributors welcome!

Java

#beginner-friendly#contributions-welcome#devcontainer#digital-health#ehr#electronic-medical-records#emr#fhir#good-first-issue#healthcare#hibernate#hl7#java#jsp#mariadb#maven#open-source#spring-boot#tomcat#webapp

[Umbrella] Dependency/docs/tooling maintenance sweep 12 days ago

help wanted Enhancement Review effort [1-5]: 3

carlos-emr/carlos

25

Open-source Electronic Medical Records (EMR) for Canadian healthcare — HL7, FHIR, Java 21, Spring 5. Contributors welcome!

Java

#beginner-friendly#contributions-welcome#devcontainer#digital-health#ehr#electronic-medical-records#emr#fhir#good-first-issue#healthcare#hibernate#hl7#java#jsp#mariadb#maven#open-source#spring-boot#tomcat#webapp

Umbrella: Architecture backlog for package, module, and naming consolidation 12 days ago

help wanted Enhancement Review effort [1-5]: 3

carlos-emr/carlos

25

Open-source Electronic Medical Records (EMR) for Canadian healthcare — HL7, FHIR, Java 21, Spring 5. Contributors welcome!

Java

#beginner-friendly#contributions-welcome#devcontainer#digital-health#ehr#electronic-medical-records#emr#fhir#good-first-issue#healthcare#hibernate#hl7#java#jsp#mariadb#maven#open-source#spring-boot#tomcat#webapp

Umbrella: Frontend modernization backlog 12 days ago

help wanted Enhancement Review effort [1-5]: 3

carlos-emr/carlos

25

Open-source Electronic Medical Records (EMR) for Canadian healthcare — HL7, FHIR, Java 21, Spring 5. Contributors welcome!

Java

#beginner-friendly#contributions-welcome#devcontainer#digital-health#ehr#electronic-medical-records#emr#fhir#good-first-issue#healthcare#hibernate#hl7#java#jsp#mariadb#maven#open-source#spring-boot#tomcat#webapp

[Umbrella] Provider/preferences/directory XSS cleanup 12 days ago

help wanted type: security technical debt

carlos-emr/carlos

25

Open-source Electronic Medical Records (EMR) for Canadian healthcare — HL7, FHIR, Java 21, Spring 5. Contributors welcome!

Java

#beginner-friendly#contributions-welcome#devcontainer#digital-health#ehr#electronic-medical-records#emr#fhir#good-first-issue#healthcare#hibernate#hl7#java#jsp#mariadb#maven#open-source#spring-boot#tomcat#webapp

Umbrella: Security headers and browser hardening backlog 12 days ago

help wanted type: security Review effort [1-5]: 3

carlos-emr/carlos

25

Open-source Electronic Medical Records (EMR) for Canadian healthcare — HL7, FHIR, Java 21, Spring 5. Contributors welcome!

Java

#beginner-friendly#contributions-welcome#devcontainer#digital-health#ehr#electronic-medical-records#emr#fhir#good-first-issue#healthcare#hibernate#hl7#java#jsp#mariadb#maven#open-source#spring-boot#tomcat#webapp

[Maintenance] Migrate legacy 2Action SpringUtils field shims to constructor injection 12 days ago

help wanted Enhancement Review effort [1-5]: 3 technical debt

carlos-emr/carlos

25

Open-source Electronic Medical Records (EMR) for Canadian healthcare — HL7, FHIR, Java 21, Spring 5. Contributors welcome!

Java

#beginner-friendly#contributions-welcome#devcontainer#digital-health#ehr#electronic-medical-records#emr#fhir#good-first-issue#healthcare#hibernate#hl7#java#jsp#mariadb#maven#open-source#spring-boot#tomcat#webapp

[Umbrella] Tickler security and logging cleanup 12 days ago

help wanted type: security Enhancement technical debt

carlos-emr/carlos

25

Open-source Electronic Medical Records (EMR) for Canadian healthcare — HL7, FHIR, Java 21, Spring 5. Contributors welcome!

Java

#beginner-friendly#contributions-welcome#devcontainer#digital-health#ehr#electronic-medical-records#emr#fhir#good-first-issue#healthcare#hibernate#hl7#java#jsp#mariadb#maven#open-source#spring-boot#tomcat#webapp

[Umbrella] Legacy GET mutation and CSRF enforcement cleanup 12 days ago

help wanted type: security

carlos-emr/carlos

25

Open-source Electronic Medical Records (EMR) for Canadian healthcare — HL7, FHIR, Java 21, Spring 5. Contributors welcome!

Java

#beginner-friendly#contributions-welcome#devcontainer#digital-health#ehr#electronic-medical-records#emr#fhir#good-first-issue#healthcare#hibernate#hl7#java#jsp#mariadb#maven#open-source#spring-boot#tomcat#webapp

[Umbrella] eForm admin and DTO security cleanup 12 days ago

help wanted type: security Review effort [1-5]: 3

carlos-emr/carlos

25

Open-source Electronic Medical Records (EMR) for Canadian healthcare — HL7, FHIR, Java 21, Spring 5. Contributors welcome!

Java

#beginner-friendly#contributions-welcome#devcontainer#digital-health#ehr#electronic-medical-records#emr#fhir#good-first-issue#healthcare#hibernate#hl7#java#jsp#mariadb#maven#open-source#spring-boot#tomcat#webapp

[Umbrella] Document/eDoc security and workflow cleanup 12 days ago

help wanted type: security Review effort [1-5]: 2

carlos-emr/carlos

25

Open-source Electronic Medical Records (EMR) for Canadian healthcare — HL7, FHIR, Java 21, Spring 5. Contributors welcome!

Java

#beginner-friendly#contributions-welcome#devcontainer#digital-health#ehr#electronic-medical-records#emr#fhir#good-first-issue#healthcare#hibernate#hl7#java#jsp#mariadb#maven#open-source#spring-boot#tomcat#webapp

[Umbrella] eForm/document rendering XSS cleanup 12 days ago

help wanted type: security Review effort [1-5]: 2

carlos-emr/carlos

25

Open-source Electronic Medical Records (EMR) for Canadian healthcare — HL7, FHIR, Java 21, Spring 5. Contributors welcome!

Java

#beginner-friendly#contributions-welcome#devcontainer#digital-health#ehr#electronic-medical-records#emr#fhir#good-first-issue#healthcare#hibernate#hl7#java#jsp#mariadb#maven#open-source#spring-boot#tomcat#webapp

Umbrella: Technical debt backlog for Sonar and maintainability cleanup 13 days ago

help wanted Enhancement Review effort [1-5]: 3 codex

carlos-emr/carlos

25

Open-source Electronic Medical Records (EMR) for Canadian healthcare — HL7, FHIR, Java 21, Spring 5. Contributors welcome!

Java

#beginner-friendly#contributions-welcome#devcontainer#digital-health#ehr#electronic-medical-records#emr#fhir#good-first-issue#healthcare#hibernate#hl7#java#jsp#mariadb#maven#open-source#spring-boot#tomcat#webapp

[Umbrella] HRM hardening sweep 13 days ago

help wanted Enhancement Review effort [1-5]: 3

carlos-emr/carlos

25

Open-source Electronic Medical Records (EMR) for Canadian healthcare — HL7, FHIR, Java 21, Spring 5. Contributors welcome!

Java

#beginner-friendly#contributions-welcome#devcontainer#digital-health#ehr#electronic-medical-records#emr#fhir#good-first-issue#healthcare#hibernate#hl7#java#jsp#mariadb#maven#open-source#spring-boot#tomcat#webapp

Expand billing mutator method-guard contract coverage 13 days ago

help wanted discussion type: security Review effort [1-5]: 3

carlos-emr/carlos

25

Open-source Electronic Medical Records (EMR) for Canadian healthcare — HL7, FHIR, Java 21, Spring 5. Contributors welcome!

Java

#beginner-friendly#contributions-welcome#devcontainer#digital-health#ehr#electronic-medical-records#emr#fhir#good-first-issue#healthcare#hibernate#hl7#java#jsp#mariadb#maven#open-source#spring-boot#tomcat#webapp

[Security] XSS — appointmentprovideradminday.jsp:2105 truncated appointment name rendered without HTML encoding (claude assist) 13 days ago

help wanted good first issue type: security type: bug Review effort [1-5]: 1

carlos-emr/carlos

25

Open-source Electronic Medical Records (EMR) for Canadian healthcare — HL7, FHIR, Java 21, Spring 5. Contributors welcome!

Java

#beginner-friendly#contributions-welcome#devcontainer#digital-health#ehr#electronic-medical-records#emr#fhir#good-first-issue#healthcare#hibernate#hl7#java#jsp#mariadb#maven#open-source#spring-boot#tomcat#webapp

Refactor: rescope legacy 'oscarConsultation' naming to 'carlosConsultation' for clarity 14 days ago

help wanted

carlos-emr/carlos

25

Open-source Electronic Medical Records (EMR) for Canadian healthcare — HL7, FHIR, Java 21, Spring 5. Contributors welcome!

Java

#beginner-friendly#contributions-welcome#devcontainer#digital-health#ehr#electronic-medical-records#emr#fhir#good-first-issue#healthcare#hibernate#hl7#java#jsp#mariadb#maven#open-source#spring-boot#tomcat#webapp

[Security] Audit filename/path logging for PHI exposure 14 days ago

help wanted type: security Review effort [1-5]: 2

carlos-emr/carlos

25

Open-source Electronic Medical Records (EMR) for Canadian healthcare — HL7, FHIR, Java 21, Spring 5. Contributors welcome!

Java

#beginner-friendly#contributions-welcome#devcontainer#digital-health#ehr#electronic-medical-records#emr#fhir#good-first-issue#healthcare#hibernate#hl7#java#jsp#mariadb#maven#open-source#spring-boot#tomcat#webapp

feat: Add JAX-RS exception mappers for REST API error handling 14 days ago

good first issue

carlos-emr/carlos

25

Open-source Electronic Medical Records (EMR) for Canadian healthcare — HL7, FHIR, Java 21, Spring 5. Contributors welcome!

Java

#beginner-friendly#contributions-welcome#devcontainer#digital-health#ehr#electronic-medical-records#emr#fhir#good-first-issue#healthcare#hibernate#hl7#java#jsp#mariadb#maven#open-source#spring-boot#tomcat#webapp

EConsult2Action.login(): SSO return URL is built from a spoofable request Host 14 days ago

help wanted type: security technical debt

carlos-emr/carlos

25

Open-source Electronic Medical Records (EMR) for Canadian healthcare — HL7, FHIR, Java 21, Spring 5. Contributors welcome!

Java

#beginner-friendly#contributions-welcome#devcontainer#digital-health#ehr#electronic-medical-records#emr#fhir#good-first-issue#healthcare#hibernate#hl7#java#jsp#mariadb#maven#open-source#spring-boot#tomcat#webapp

[Security] OAuthStatusService /oauth/info serializes full Provider entity — OHIP and billing numbers over-disclosed to OAuth clients (claude assist) 14 days ago

help wanted good first issue type: security type: bug Review effort [1-5]: 2

carlos-emr/carlos

25

Open-source Electronic Medical Records (EMR) for Canadian healthcare — HL7, FHIR, Java 21, Spring 5. Contributors welcome!

Java

#beginner-friendly#contributions-welcome#devcontainer#digital-health#ehr#electronic-medical-records#emr#fhir#good-first-issue#healthcare#hibernate#hl7#java#jsp#mariadb#maven#open-source#spring-boot#tomcat#webapp

Consultation request signatures do not reliably appear on-screen or in generated PDFs 14 days ago

help wanted type: bug

carlos-emr/carlos

25

Open-source Electronic Medical Records (EMR) for Canadian healthcare — HL7, FHIR, Java 21, Spring 5. Contributors welcome!

Java

#beginner-friendly#contributions-welcome#devcontainer#digital-health#ehr#electronic-medical-records#emr#fhir#good-first-issue#healthcare#hibernate#hl7#java#jsp#mariadb#maven#open-source#spring-boot#tomcat#webapp

[Security] TicklerWebService logs raw JSON request bodies at INFO level 14 days ago

good first issue type: security Review effort [1-5]: 2 technical debt

carlos-emr/carlos

25

Open-source Electronic Medical Records (EMR) for Canadian healthcare — HL7, FHIR, Java 21, Spring 5. Contributors welcome!

Java

#beginner-friendly#contributions-welcome#devcontainer#digital-health#ehr#electronic-medical-records#emr#fhir#good-first-issue#healthcare#hibernate#hl7#java#jsp#mariadb#maven#open-source#spring-boot#tomcat#webapp

test: migrate OscarOAuthDataProviderUnitTest onto CarlosUnitTestBase (follow-up to #2955) 14 days ago

help wanted Review effort [1-5]: 3

carlos-emr/carlos

25

Open-source Electronic Medical Records (EMR) for Canadian healthcare — HL7, FHIR, Java 21, Spring 5. Contributors welcome!

Java

#beginner-friendly#contributions-welcome#devcontainer#digital-health#ehr#electronic-medical-records#emr#fhir#good-first-issue#healthcare#hibernate#hl7#java#jsp#mariadb#maven#open-source#spring-boot#tomcat#webapp

[Security] AppointmentExtTo.toString() leaks patient name, phone, and email to application logs (claude assist) 15 days ago

help wanted good first issue type: security Review effort [1-5]: 2

carlos-emr/carlos

25

Open-source Electronic Medical Records (EMR) for Canadian healthcare — HL7, FHIR, Java 21, Spring 5. Contributors welcome!

Java

#beginner-friendly#contributions-welcome#devcontainer#digital-health#ehr#electronic-medical-records#emr#fhir#good-first-issue#healthcare#hibernate#hl7#java#jsp#mariadb#maven#open-source#spring-boot#tomcat#webapp

[Security] WebServiceLoggingAdvice logs all REST WebService call parameters at INFO level — PHI and OAuth tokens in logs (claude assist) 15 days ago

help wanted type: security type: bug Review effort [1-5]: 2

carlos-emr/carlos

25

Open-source Electronic Medical Records (EMR) for Canadian healthcare — HL7, FHIR, Java 21, Spring 5. Contributors welcome!

Java

#beginner-friendly#contributions-welcome#devcontainer#digital-health#ehr#electronic-medical-records#emr#fhir#good-first-issue#healthcare#hibernate#hl7#java#jsp#mariadb#maven#open-source#spring-boot#tomcat#webapp

Audit and rename legacy Deprecated_SHA_PasswordEncoder 15 days ago

help wanted technical debt

carlos-emr/carlos

25

Open-source Electronic Medical Records (EMR) for Canadian healthcare — HL7, FHIR, Java 21, Spring 5. Contributors welcome!

Java

#beginner-friendly#contributions-welcome#devcontainer#digital-health#ehr#electronic-medical-records#emr#fhir#good-first-issue#healthcare#hibernate#hl7#java#jsp#mariadb#maven#open-source#spring-boot#tomcat#webapp

[Security] Path traversal / arbitrary .html file read in oscarLogging.jsp via reportDate (no PathValidationUtils) (claude assist) 15 days ago

help wanted good first issue type: security Review effort [1-5]: 1

carlos-emr/carlos

25

Open-source Electronic Medical Records (EMR) for Canadian healthcare — HL7, FHIR, Java 21, Spring 5. Contributors welcome!

Java

#beginner-friendly#contributions-welcome#devcontainer#digital-health#ehr#electronic-medical-records#emr#fhir#good-first-issue#healthcare#hibernate#hl7#java#jsp#mariadb#maven#open-source#spring-boot#tomcat#webapp

[Security] MsgClearMessage2Action clears attachments via GET; add POST-only flow 16 days ago

help wanted type: security type: bug Review effort [1-5]: 2

carlos-emr/carlos

25

Open-source Electronic Medical Records (EMR) for Canadian healthcare — HL7, FHIR, Java 21, Spring 5. Contributors welcome!

Java

#beginner-friendly#contributions-welcome#devcontainer#digital-health#ehr#electronic-medical-records#emr#fhir#good-first-issue#healthcare#hibernate#hl7#java#jsp#mariadb#maven#open-source#spring-boot#tomcat#webapp

Tickler bulk complete/delete always 500 — JsonNode cast to Integer (claude assist) 16 days ago

good first issue type: bug Review effort [1-5]: 1

carlos-emr/carlos

25

Open-source Electronic Medical Records (EMR) for Canadian healthcare — HL7, FHIR, Java 21, Spring 5. Contributors welcome!

Java

#beginner-friendly#contributions-welcome#devcontainer#digital-health#ehr#electronic-medical-records#emr#fhir#good-first-issue#healthcare#hibernate#hl7#java#jsp#mariadb#maven#open-source#spring-boot#tomcat#webapp

[Bug] TicklerWebService.completeTicklers() and deleteTicklers() throw ClassCastException — ArrayNode elements are JsonNode, not Integer (claude assist) 16 days ago

help wanted good first issue type: bug Review effort [1-5]: 1

carlos-emr/carlos

25

Open-source Electronic Medical Records (EMR) for Canadian healthcare — HL7, FHIR, Java 21, Spring 5. Contributors welcome!

Java

#beginner-friendly#contributions-welcome#devcontainer#digital-health#ehr#electronic-medical-records#emr#fhir#good-first-issue#healthcare#hibernate#hl7#java#jsp#mariadb#maven#open-source#spring-boot#tomcat#webapp

test: add LoginCheckLoginBean unit tests for null-session, timing-equalization, and forced-reset paths (claude assist) 16 days ago

help wanted good first issue type: security Review effort [1-5]: 3

carlos-emr/carlos

25

Open-source Electronic Medical Records (EMR) for Canadian healthcare — HL7, FHIR, Java 21, Spring 5. Contributors welcome!

Java

#beginner-friendly#contributions-welcome#devcontainer#digital-health#ehr#electronic-medical-records#emr#fhir#good-first-issue#healthcare#hibernate#hl7#java#jsp#mariadb#maven#open-source#spring-boot#tomcat#webapp

Monthly appointment fetch excludes the last day of the month (claude assist) 16 days ago

good first issue type: bug Review effort [1-5]: 1

carlos-emr/carlos

25

Open-source Electronic Medical Records (EMR) for Canadian healthcare — HL7, FHIR, Java 21, Spring 5. Contributors welcome!

Java

#beginner-friendly#contributions-welcome#devcontainer#digital-health#ehr#electronic-medical-records#emr#fhir#good-first-issue#healthcare#hibernate#hl7#java#jsp#mariadb#maven#open-source#spring-boot#tomcat#webapp

(codex assist) Tighten authorization for XML form import 17 days ago

help wanted type: security type: bug Review effort [1-5]: 2

carlos-emr/carlos

25

Open-source Electronic Medical Records (EMR) for Canadian healthcare — HL7, FHIR, Java 21, Spring 5. Contributors welcome!

Java

#beginner-friendly#contributions-welcome#devcontainer#digital-health#ehr#electronic-medical-records#emr#fhir#good-first-issue#healthcare#hibernate#hl7#java#jsp#mariadb#maven#open-source#spring-boot#tomcat#webapp

[Bug]: Tickler Preferences opens wrong jsp 17 days ago

good first issue type: bug

carlos-emr/carlos

25

Open-source Electronic Medical Records (EMR) for Canadian healthcare — HL7, FHIR, Java 21, Spring 5. Contributors welcome!

Java

#beginner-friendly#contributions-welcome#devcontainer#digital-health#ehr#electronic-medical-records#emr#fhir#good-first-issue#healthcare#hibernate#hl7#java#jsp#mariadb#maven#open-source#spring-boot#tomcat#webapp

Add LogSanitizer and UploadedFileUtils utilities; sanitize filename logging in EDocUtil 17 days ago

help wanted good first issue type: security Review effort [1-5]: 3

carlos-emr/carlos

25

Open-source Electronic Medical Records (EMR) for Canadian healthcare — HL7, FHIR, Java 21, Spring 5. Contributors welcome!

Java

#beginner-friendly#contributions-welcome#devcontainer#digital-health#ehr#electronic-medical-records#emr#fhir#good-first-issue#healthcare#hibernate#hl7#java#jsp#mariadb#maven#open-source#spring-boot#tomcat#webapp

[Investigation]: eForm field value persistence — needs confirmed repro before fix 19 days ago

help wanted Review effort [1-5]: 3

carlos-emr/carlos

25

Open-source Electronic Medical Records (EMR) for Canadian healthcare — HL7, FHIR, Java 21, Spring 5. Contributors welcome!

Java

#beginner-friendly#contributions-welcome#devcontainer#digital-health#ehr#electronic-medical-records#emr#fhir#good-first-issue#healthcare#hibernate#hl7#java#jsp#mariadb#maven#open-source#spring-boot#tomcat#webapp

No production transport-security config: session cookie lacks Secure, no HSTS, no RemoteIpValve for proxy scheme-trust 19 days ago

help wanted type: security Review effort [1-5]: 3

carlos-emr/carlos

25

Open-source Electronic Medical Records (EMR) for Canadian healthcare — HL7, FHIR, Java 21, Spring 5. Contributors welcome!

Java

#beginner-friendly#contributions-welcome#devcontainer#digital-health#ehr#electronic-medical-records#emr#fhir#good-first-issue#healthcare#hibernate#hl7#java#jsp#mariadb#maven#open-source#spring-boot#tomcat#webapp

Empty WAF_TRUSTED_PROXY_IPS defaults break rate limiting and audit IP attribution behind a proxy 19 days ago

help wanted good first issue type: security type: bug Review effort [1-5]: 1

carlos-emr/carlos

25

Open-source Electronic Medical Records (EMR) for Canadian healthcare — HL7, FHIR, Java 21, Spring 5. Contributors welcome!

Java

#beginner-friendly#contributions-welcome#devcontainer#digital-health#ehr#electronic-medical-records#emr#fhir#good-first-issue#healthcare#hibernate#hl7#java#jsp#mariadb#maven#open-source#spring-boot#tomcat#webapp

Track http-proxy-middleware transitive advisory in docs dev tooling defense in depth (codex assist) 19 days ago

help wanted type: security

carlos-emr/carlos

25

Open-source Electronic Medical Records (EMR) for Canadian healthcare — HL7, FHIR, Java 21, Spring 5. Contributors welcome!

Java

#beginner-friendly#contributions-welcome#devcontainer#digital-health#ehr#electronic-medical-records#emr#fhir#good-first-issue#healthcare#hibernate#hl7#java#jsp#mariadb#maven#open-source#spring-boot#tomcat#webapp

Investigate: Hibernate 7 JPA 3 Criteria API (Type-Safe Queries) 20 days ago

help wanted type: security Review effort [1-5]: 3

carlos-emr/carlos

25

Open-source Electronic Medical Records (EMR) for Canadian healthcare — HL7, FHIR, Java 21, Spring 5. Contributors welcome!

Java

#beginner-friendly#contributions-welcome#devcontainer#digital-health#ehr#electronic-medical-records#emr#fhir#good-first-issue#healthcare#hibernate#hl7#java#jsp#mariadb#maven#open-source#spring-boot#tomcat#webapp

[Security] XSS — Multiple unencoded fields in documentManager/addedithtmldocument.jsp (claude assist) 20 days ago

help wanted good first issue type: security Review effort [1-5]: 2

carlos-emr/carlos

25

Open-source Electronic Medical Records (EMR) for Canadian healthcare — HL7, FHIR, Java 21, Spring 5. Contributors welcome!

Java

#beginner-friendly#contributions-welcome#devcontainer#digital-health#ehr#electronic-medical-records#emr#fhir#good-first-issue#healthcare#hibernate#hl7#java#jsp#mariadb#maven#open-source#spring-boot#tomcat#webapp

Harden legacy antenatal risk XML save against XML injection 20 days ago

help wanted type: security Review effort [1-5]: 2

carlos-emr/carlos

25

Open-source Electronic Medical Records (EMR) for Canadian healthcare — HL7, FHIR, Java 21, Spring 5. Contributors welcome!

Java

#beginner-friendly#contributions-welcome#devcontainer#digital-health#ehr#electronic-medical-records#emr#fhir#good-first-issue#healthcare#hibernate#hl7#java#jsp#mariadb#maven#open-source#spring-boot#tomcat#webapp

Bug: CarlosProperties.getProperty throws NPE on null key instead of IllegalArgumentException (claude assist) 20 days ago

help wanted good first issue type: bug Review effort [1-5]: 1

carlos-emr/carlos

25

Open-source Electronic Medical Records (EMR) for Canadian healthcare — HL7, FHIR, Java 21, Spring 5. Contributors welcome!

Java

#beginner-friendly#contributions-welcome#devcontainer#digital-health#ehr#electronic-medical-records#emr#fhir#good-first-issue#healthcare#hibernate#hl7#java#jsp#mariadb#maven#open-source#spring-boot#tomcat#webapp

Fix low-severity eForm PDF signature URL validation alert 20 days ago

good first issue type: security type: bug Review effort [1-5]: 2

carlos-emr/carlos

25

Open-source Electronic Medical Records (EMR) for Canadian healthcare — HL7, FHIR, Java 21, Spring 5. Contributors welcome!

Java

#beginner-friendly#contributions-welcome#devcontainer#digital-health#ehr#electronic-medical-records#emr#fhir#good-first-issue#healthcare#hibernate#hl7#java#jsp#mariadb#maven#open-source#spring-boot#tomcat#webapp

[Bug] EctSaveEncounter2Action: unguarded Integer.parseInt() on layout parameters causes 500 on malformed input (claude assist) 21 days ago

help wanted good first issue type: bug Review effort [1-5]: 2

carlos-emr/carlos

25

Open-source Electronic Medical Records (EMR) for Canadian healthcare — HL7, FHIR, Java 21, Spring 5. Contributors welcome!

Java

#beginner-friendly#contributions-welcome#devcontainer#digital-health#ehr#electronic-medical-records#emr#fhir#good-first-issue#healthcare#hibernate#hl7#java#jsp#mariadb#maven#open-source#spring-boot#tomcat#webapp

[Bug] MsgClearMessage2Action: NullPointerException if msgSessionBean is absent from session (claude assist) 21 days ago

help wanted good first issue type: bug Review effort [1-5]: 1

carlos-emr/carlos

25

Open-source Electronic Medical Records (EMR) for Canadian healthcare — HL7, FHIR, Java 21, Spring 5. Contributors welcome!

Java

#beginner-friendly#contributions-welcome#devcontainer#digital-health#ehr#electronic-medical-records#emr#fhir#good-first-issue#healthcare#hibernate#hl7#java#jsp#mariadb#maven#open-source#spring-boot#tomcat#webapp

[Maintenance] Appointment/schedule JSPs: unused legacy OWASP Encoder taglib declarations and Encode imports (claude assist) 23 days ago

help wanted good first issue Review effort [1-5]: 1 technical debt

carlos-emr/carlos

25

Open-source Electronic Medical Records (EMR) for Canadian healthcare — HL7, FHIR, Java 21, Spring 5. Contributors welcome!

Java

#beginner-friendly#contributions-welcome#devcontainer#digital-health#ehr#electronic-medical-records#emr#fhir#good-first-issue#healthcare#hibernate#hl7#java#jsp#mariadb#maven#open-source#spring-boot#tomcat#webapp

Replace Flowsheet2Action direct-response return nulls with NONE 23 days ago

help wanted good first issue type: bug Review effort [1-5]: 1

carlos-emr/carlos

25

Open-source Electronic Medical Records (EMR) for Canadian healthcare — HL7, FHIR, Java 21, Spring 5. Contributors welcome!

Java

#beginner-friendly#contributions-welcome#devcontainer#digital-health#ehr#electronic-medical-records#emr#fhir#good-first-issue#healthcare#hibernate#hl7#java#jsp#mariadb#maven#open-source#spring-boot#tomcat#webapp

[Bug]: eForm deletion fails with SecurityException for providers without _eform write privilege 23 days ago

help wanted type: security type: bug Review effort [1-5]: 3

carlos-emr/carlos

25

Open-source Electronic Medical Records (EMR) for Canadian healthcare — HL7, FHIR, Java 21, Spring 5. Contributors welcome!

Java

#beginner-friendly#contributions-welcome#devcontainer#digital-health#ehr#electronic-medical-records#emr#fhir#good-first-issue#healthcare#hibernate#hl7#java#jsp#mariadb#maven#open-source#spring-boot#tomcat#webapp

[Security] Referral number and ID rendered without encoding in billingreferralAdmin.jsp (claude assist) 23 days ago

help wanted good first issue type: security Review effort [1-5]: 2

carlos-emr/carlos

25

Open-source Electronic Medical Records (EMR) for Canadian healthcare — HL7, FHIR, Java 21, Spring 5. Contributors welcome!

Java

#beginner-friendly#contributions-welcome#devcontainer#digital-health#ehr#electronic-medical-records#emr#fhir#good-first-issue#healthcare#hibernate#hl7#java#jsp#mariadb#maven#open-source#spring-boot#tomcat#webapp

[Bug] RxDsMessageTo1: leftover debug logger.error() fires on every constructor instantiation — dumps drug interaction map at ERROR level (claude assist) 23 days ago

help wanted good first issue type: security type: bug Review effort [1-5]: 1 technical debt

carlos-emr/carlos

25

Open-source Electronic Medical Records (EMR) for Canadian healthcare — HL7, FHIR, Java 21, Spring 5. Contributors welcome!

Java

#beginner-friendly#contributions-welcome#devcontainer#digital-health#ehr#electronic-medical-records#emr#fhir#good-first-issue#healthcare#hibernate#hl7#java#jsp#mariadb#maven#open-source#spring-boot#tomcat#webapp

[Bug] TeleplanFileWriter.Claims.addToTotal() mutates outer bigTotal instead of claimTotal — per-provider Teleplan report subtotals always 0.00 (claude assist) 23 days ago

help wanted good first issue type: bug Review effort [1-5]: 2

carlos-emr/carlos

25

Open-source Electronic Medical Records (EMR) for Canadian healthcare — HL7, FHIR, Java 21, Spring 5. Contributors welcome!

Java

#beginner-friendly#contributions-welcome#devcontainer#digital-health#ehr#electronic-medical-records#emr#fhir#good-first-issue#healthcare#hibernate#hl7#java#jsp#mariadb#maven#open-source#spring-boot#tomcat#webapp

[Bug] SupServiceCodeAssoc2Action inverted validation: valid edits dropped, invalid edits saved, deletes never execute (claude assist) 23 days ago

help wanted good first issue type: bug Review effort [1-5]: 2 Review effort [1-5]: 1

carlos-emr/carlos

25

Open-source Electronic Medical Records (EMR) for Canadian healthcare — HL7, FHIR, Java 21, Spring 5. Contributors welcome!

Java

#beginner-friendly#contributions-welcome#devcontainer#digital-health#ehr#electronic-medical-records#emr#fhir#good-first-issue#healthcare#hibernate#hl7#java#jsp#mariadb#maven#open-source#spring-boot#tomcat#webapp

[Security] DemographicService REST CRUD — addDemographic/updateDemographic/deleteDemographic missing privilege checks (claude assist) 24 days ago

help wanted good first issue type: security type: bug Review effort [1-5]: 2

carlos-emr/carlos

25

Open-source Electronic Medical Records (EMR) for Canadian healthcare — HL7, FHIR, Java 21, Spring 5. Contributors welcome!

Java

#beginner-friendly#contributions-welcome#devcontainer#digital-health#ehr#electronic-medical-records#emr#fhir#good-first-issue#healthcare#hibernate#hl7#java#jsp#mariadb#maven#open-source#spring-boot#tomcat#webapp

[Bug]: TicklerWebService CRUD operations throw a RuntimeException if the securityInfoManager.hasPrivilege() check returns false 24 days ago

help wanted good first issue type: security type: bug Review effort [1-5]: 1

carlos-emr/carlos

25

Open-source Electronic Medical Records (EMR) for Canadian healthcare — HL7, FHIR, Java 21, Spring 5. Contributors welcome!

Java

#beginner-friendly#contributions-welcome#devcontainer#digital-health#ehr#electronic-medical-records#emr#fhir#good-first-issue#healthcare#hibernate#hl7#java#jsp#mariadb#maven#open-source#spring-boot#tomcat#webapp

Fix Docusaurus MDX parsing errors in docs build 25 days ago

help wanted good first issue Review effort [1-5]: 3 technical debt

carlos-emr/carlos

25

Open-source Electronic Medical Records (EMR) for Canadian healthcare — HL7, FHIR, Java 21, Spring 5. Contributors welcome!

Java

#beginner-friendly#contributions-welcome#devcontainer#digital-health#ehr#electronic-medical-records#emr#fhir#good-first-issue#healthcare#hibernate#hl7#java#jsp#mariadb#maven#open-source#spring-boot#tomcat#webapp

Security: resolve 18 XSS_SERVLET alerts in Flowsheet2Action 25 days ago

help wanted good first issue type: security Review effort [1-5]: 3

carlos-emr/carlos

25

Open-source Electronic Medical Records (EMR) for Canadian healthcare — HL7, FHIR, Java 21, Spring 5. Contributors welcome!

Java

#beginner-friendly#contributions-welcome#devcontainer#digital-health#ehr#electronic-medical-records#emr#fhir#good-first-issue#healthcare#hibernate#hl7#java#jsp#mariadb#maven#open-source#spring-boot#tomcat#webapp

Security: resolve 5 XSS_SERVLET alerts in dxResearchLoadAssociations2Action 25 days ago

help wanted good first issue type: security Review effort [1-5]: 2

carlos-emr/carlos

25

Open-source Electronic Medical Records (EMR) for Canadian healthcare — HL7, FHIR, Java 21, Spring 5. Contributors welcome!

Java

#beginner-friendly#contributions-welcome#devcontainer#digital-health#ehr#electronic-medical-records#emr#fhir#good-first-issue#healthcare#hibernate#hl7#java#jsp#mariadb#maven#open-source#spring-boot#tomcat#webapp

[Bug]: Signature Malformation on Rx 25 days ago

help wanted type: bug Review effort [1-5]: 3

carlos-emr/carlos

25

Open-source Electronic Medical Records (EMR) for Canadian healthcare — HL7, FHIR, Java 21, Spring 5. Contributors welcome!

Java

#beginner-friendly#contributions-welcome#devcontainer#digital-health#ehr#electronic-medical-records#emr#fhir#good-first-issue#healthcare#hibernate#hl7#java#jsp#mariadb#maven#open-source#spring-boot#tomcat#webapp

[Bug] MsgViewPDFAttachment2Action: PDF binary data converted to String with default charset — corrupts binary content (claude assist) 25 days ago

help wanted good first issue type: bug Review effort [1-5]: 2 Review effort [1-5]: 1

carlos-emr/carlos

25

Open-source Electronic Medical Records (EMR) for Canadian healthcare — HL7, FHIR, Java 21, Spring 5. Contributors welcome!

Java

#beginner-friendly#contributions-welcome#devcontainer#digital-health#ehr#electronic-medical-records#emr#fhir#good-first-issue#healthcare#hibernate#hl7#java#jsp#mariadb#maven#open-source#spring-boot#tomcat#webapp

[Bug]: provider signature stamp preview/rendering breaks when signature property exists but backing image is missing 25 days ago

help wanted type: bug Review effort [1-5]: 3

carlos-emr/carlos

25

Open-source Electronic Medical Records (EMR) for Canadian healthcare — HL7, FHIR, Java 21, Spring 5. Contributors welcome!

Java

#beginner-friendly#contributions-welcome#devcontainer#digital-health#ehr#electronic-medical-records#emr#fhir#good-first-issue#healthcare#hibernate#hl7#java#jsp#mariadb#maven#open-source#spring-boot#tomcat#webapp

[Security] MSPBillingNote.getN01() logs MSP correspondence note (PHI) at DEBUG with leftover "LOOKATME" artifact (claude assist) 26 days ago

help wanted good first issue type: security Review effort [1-5]: 1

carlos-emr/carlos

25

Open-source Electronic Medical Records (EMR) for Canadian healthcare — HL7, FHIR, Java 21, Spring 5. Contributors welcome!

Java

#beginner-friendly#contributions-welcome#devcontainer#digital-health#ehr#electronic-medical-records#emr#fhir#good-first-issue#healthcare#hibernate#hl7#java#jsp#mariadb#maven#open-source#spring-boot#tomcat#webapp

[Bug] CreatePaymentType2Action / UpdatePaymentType2Action return an empty 200 (no JSON body) when required params are missing — client JS gets no error (claude assist) 26 days ago

help wanted good first issue type: bug Review effort [1-5]: 1

carlos-emr/carlos

25

Open-source Electronic Medical Records (EMR) for Canadian healthcare — HL7, FHIR, Java 21, Spring 5. Contributors welcome!

Java

#beginner-friendly#contributions-welcome#devcontainer#digital-health#ehr#electronic-medical-records#emr#fhir#good-first-issue#healthcare#hibernate#hl7#java#jsp#mariadb#maven#open-source#spring-boot#tomcat#webapp

[Security] ProviderPeriodAppsTo.toString() explicitly includes appointment notes field — clinical text in log output (claude assist) 26 days ago

help wanted good first issue type: security Review effort [1-5]: 1

carlos-emr/carlos

25

Open-source Electronic Medical Records (EMR) for Canadian healthcare — HL7, FHIR, Java 21, Spring 5. Contributors welcome!

Java

#beginner-friendly#contributions-welcome#devcontainer#digital-health#ehr#electronic-medical-records#emr#fhir#good-first-issue#healthcare#hibernate#hl7#java#jsp#mariadb#maven#open-source#spring-boot#tomcat#webapp

[Security] UpdateDemographicProvider: bulk patient-provider reassignment via GET — no POST enforcement (CSRF) (claude assist) 26 days ago

help wanted good first issue type: security Review effort [1-5]: 2

carlos-emr/carlos

25

Open-source Electronic Medical Records (EMR) for Canadian healthcare — HL7, FHIR, Java 21, Spring 5. Contributors welcome!

Java

#beginner-friendly#contributions-welcome#devcontainer#digital-health#ehr#electronic-medical-records#emr#fhir#good-first-issue#healthcare#hibernate#hl7#java#jsp#mariadb#maven#open-source#spring-boot#tomcat#webapp

[Security] Admin keygen + lookup-list endpoints perform state changes on GET (CSRF) — ViewKeygenCreateKey/UpdateMatchingProfessionalSpecialist, lookupListManagerAction add/order (claude assist) 26 days ago

help wanted good first issue type: security Review effort [1-5]: 2

carlos-emr/carlos

25

Open-source Electronic Medical Records (EMR) for Canadian healthcare — HL7, FHIR, Java 21, Spring 5. Contributors welcome!

Java

#beginner-friendly#contributions-welcome#devcontainer#digital-health#ehr#electronic-medical-records#emr#fhir#good-first-issue#healthcare#hibernate#hl7#java#jsp#mariadb#maven#open-source#spring-boot#tomcat#webapp

[Security] ProviderPrivilege/ProviderRole admin mutations reachable via GET — buttonUpdate/buttonSetPrimaryRole bypass POST guard (CSRF) (claude assist) 26 days ago

help wanted type: security Review effort [1-5]: 2

carlos-emr/carlos

25

Open-source Electronic Medical Records (EMR) for Canadian healthcare — HL7, FHIR, Java 21, Spring 5. Contributors welcome!

Java

#beginner-friendly#contributions-welcome#devcontainer#digital-health#ehr#electronic-medical-records#emr#fhir#good-first-issue#healthcare#hibernate#hl7#java#jsp#mariadb#maven#open-source#spring-boot#tomcat#webapp

[Bug] BC billing history archive broken: BillingHistoryDAO uses JDBC-illegal "?1" placeholder with no bound param — createBillingHistoryArchive always fails (claude assist) 26 days ago

help wanted type: security type: bug Review effort [1-5]: 2 Review effort [1-5]: 3

carlos-emr/carlos

25

Open-source Electronic Medical Records (EMR) for Canadian healthcare — HL7, FHIR, Java 21, Spring 5. Contributors welcome!

Java

#beginner-friendly#contributions-welcome#devcontainer#digital-health#ehr#electronic-medical-records#emr#fhir#good-first-issue#healthcare#hibernate#hl7#java#jsp#mariadb#maven#open-source#spring-boot#tomcat#webapp

[Bug] ViewInrBillingGeneration2Action resolves just-persisted bill id via search_billing_no_by_appt(demoNo, 0) — racy, can cross-wire BillingDetail to the wrong header (claude assist) 26 days ago

help wanted type: security type: bug

carlos-emr/carlos

25

Open-source Electronic Medical Records (EMR) for Canadian healthcare — HL7, FHIR, Java 21, Spring 5. Contributors welcome!

Java

#beginner-friendly#contributions-welcome#devcontainer#digital-health#ehr#electronic-medical-records#emr#fhir#good-first-issue#healthcare#hibernate#hl7#java#jsp#mariadb#maven#open-source#spring-boot#tomcat#webapp

[Security] Stored XSS — formwcb.jsp renders WCB free-text fields (employer name/address, nature-of-injury, patient name) unencoded in JS onClick handlers and table cells (claude assist) 26 days ago

good first issue type: security Review effort [1-5]: 2

carlos-emr/carlos

25

Open-source Electronic Medical Records (EMR) for Canadian healthcare — HL7, FHIR, Java 21, Spring 5. Contributors welcome!

Java

#beginner-friendly#contributions-welcome#devcontainer#digital-health#ehr#electronic-medical-records#emr#fhir#good-first-issue#healthcare#hibernate#hl7#java#jsp#mariadb#maven#open-source#spring-boot#tomcat#webapp

[Bug]: MeasurementGraph returns corrupted PNG bytes under authenticated GraphMeasurements request 26 days ago

help wanted type: bug Review effort [1-5]: 3

carlos-emr/carlos

25

Open-source Electronic Medical Records (EMR) for Canadian healthcare — HL7, FHIR, Java 21, Spring 5. Contributors welcome!

Java

#beginner-friendly#contributions-welcome#devcontainer#digital-health#ehr#electronic-medical-records#emr#fhir#good-first-issue#healthcare#hibernate#hl7#java#jsp#mariadb#maven#open-source#spring-boot#tomcat#webapp

[Maintenance] ON billing 2Actions: SpringUtils.getBean() field shims — migrate to constructor injection (claude assist) 26 days ago

help wanted good first issue type: security Review effort [1-5]: 3 technical debt

carlos-emr/carlos

25

Open-source Electronic Medical Records (EMR) for Canadian healthcare — HL7, FHIR, Java 21, Spring 5. Contributors welcome!

Java

#beginner-friendly#contributions-welcome#devcontainer#digital-health#ehr#electronic-medical-records#emr#fhir#good-first-issue#healthcare#hibernate#hl7#java#jsp#mariadb#maven#open-source#spring-boot#tomcat#webapp

[Security] ON billing: bill creator/audit attribution taken from spoofable request parameters in INR/flu/batch billing actions (claude assist) 26 days ago

help wanted type: security type: bug Review effort [1-5]: 2

carlos-emr/carlos

25

Open-source Electronic Medical Records (EMR) for Canadian healthcare — HL7, FHIR, Java 21, Spring 5. Contributors welcome!

Java

#beginner-friendly#contributions-welcome#devcontainer#digital-health#ehr#electronic-medical-records#emr#fhir#good-first-issue#healthcare#hibernate#hl7#java#jsp#mariadb#maven#open-source#spring-boot#tomcat#webapp

[Security] ManageTeleplan2Action gates Teleplan credential/claim-submission operations behind _billing READ instead of write (claude assist) 26 days ago

help wanted type: security Review effort [1-5]: 2

carlos-emr/carlos

25

Open-source Electronic Medical Records (EMR) for Canadian healthcare — HL7, FHIR, Java 21, Spring 5. Contributors welcome!

Java

#beginner-friendly#contributions-welcome#devcontainer#digital-health#ehr#electronic-medical-records#emr#fhir#good-first-issue#healthcare#hibernate#hl7#java#jsp#mariadb#maven#open-source#spring-boot#tomcat#webapp

[Security] BillingEditCode2Action.ajaxCodeUpdate mutates billing fee codes before any privilege/session check (claude assist) 26 days ago

help wanted type: security Review effort [1-5]: 2

carlos-emr/carlos

25

Open-source Electronic Medical Records (EMR) for Canadian healthcare — HL7, FHIR, Java 21, Spring 5. Contributors welcome!

Java

#beginner-friendly#contributions-welcome#devcontainer#digital-health#ehr#electronic-medical-records#emr#fhir#good-first-issue#healthcare#hibernate#hl7#java#jsp#mariadb#maven#open-source#spring-boot#tomcat#webapp

[Security] DocumentTeleplanReportUploadServlet accepts authenticated file uploads with no privilege check (claude assist) 26 days ago

help wanted type: security Review effort [1-5]: 2

carlos-emr/carlos

25

Open-source Electronic Medical Records (EMR) for Canadian healthcare — HL7, FHIR, Java 21, Spring 5. Contributors welcome!

Java

#beginner-friendly#contributions-welcome#devcontainer#digital-health#ehr#electronic-medical-records#emr#fhir#good-first-issue#healthcare#hibernate#hl7#java#jsp#mariadb#maven#open-source#spring-boot#tomcat#webapp

[Bug] ExtractBean.setLog() called with swapped arguments for Teleplan note records — note record never logged / NumberFormatException (claude assist) 26 days ago

good first issue type: bug Review effort [1-5]: 1

carlos-emr/carlos

25

Open-source Electronic Medical Records (EMR) for Canadian healthcare — HL7, FHIR, Java 21, Spring 5. Contributors welcome!

Java

#beginner-friendly#contributions-welcome#devcontainer#digital-health#ehr#electronic-medical-records#emr#fhir#good-first-issue#healthcare#hibernate#hl7#java#jsp#mariadb#maven#open-source#spring-boot#tomcat#webapp

Open Issues Need Help