The Health Ministry is still fixing MySejahtera's security vulnerabilities which made headlines recently when spam emails and unsolicited messages were sent out from the app.

The ministry yesterday said the incident was caused by abusing APIs (application programming interfaces), and not due to a MySejahtera database leak.

APIs are software intermediaries that...