Skip to main content

Is PatientNotes affected by recent security vulnerabilities? (October 2026)

PatientNotes is not affected by the October 2026 PHP vulnerabilities. Here's where we stand on Node.js, LiteLLM and eMudhra, and what we'll do if anything ever affects your data.

Last updated: 26 October 2026

A number of security issues were reported in October 2026. Here's where PatientNotes stands on each.

PHP vulnerabilities (CVE-2026-109618 and CVE-2026-109619)

PatientNotes is not affected. We don't use PHP anywhere: not in the web app, our website, the help centre or our admin tools.

Other issues reported the same week

  • Node.js: we use Node.js and applied the security fix the same day it was released.

  • LiteLLM: we don't use it.

  • eMudhra certificates: we don't use them.

Your data

We have seen no signs of unauthorised access to accounts or patient data. If we ever find an issue affecting your data, we'll tell you directly and promptly so you can meet your own obligations.

Extra protection for your account

You can turn on multi-factor authentication for your account at any time in your profile settings.

Need this in writing?

If you need a written response for your records, or have other security questions, message us in the help widget or email [email protected] and our team will help.

More about how we protect your information: Understanding Privacy and Security of PatientNotes

Did this answer your question?