# Security: Upcoming Security Release for edx-platform on 2025-12-16

**URL:** <https://discuss.openedx.org/t/security-upcoming-security-release-for-edx-platform-on-2025-12-16/17787>\
**Category:** Security\
**Created:** [December 12, 2025, 5:25pm UTC](https://discuss.openedx.org/t/security-upcoming-security-release-for-edx-platform-on-2025-12-16/17787 "2025-12-12T17:25:33Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![feanil](https://sea2.discourse-cdn.com/flex020/user_avatar/discuss.openedx.org/feanil/32/37_2.png) [@feanil](https://discuss.openedx.org/u/feanil)\
**Post date:** [December 12, 2025, 5:25pm UTC](https://discuss.openedx.org/t/security-upcoming-security-release-for-edx-platform-on-2025-12-16/17787/1 "2025-12-12T17:25:33Z")

</div>

A fix will be merged to openedx/edx-platform on 2025-12-16T17:00:00Z

It will fix one security defect with a “critical” [CVSS 3.1 severity rating](https://nvd.nist.gov/vuln-metrics/cvss).

Details will be published here after release: [GitHub security advisory](https://github.com/openedx/edx-platform/security/advisories/GHSA-rh64-vc2h-7wfj).

---

<div class="post-metadata">

**Author:** ![Emad](https://sea2.discourse-cdn.com/flex020/user_avatar/discuss.openedx.org/emad/32/8930_2.png) [@Emad](https://discuss.openedx.org/u/Emad)\
**Post date:** [December 16, 2025, 9:02am UTC](https://discuss.openedx.org/t/security-upcoming-security-release-for-edx-platform-on-2025-12-16/17787/2 "2025-12-16T09:02:43Z")

</div>

Any updates on this,@feanil ?

---

<div class="post-metadata">

**Author:** ![feanil](https://sea2.discourse-cdn.com/flex020/user_avatar/discuss.openedx.org/feanil/32/37_2.png) [@feanil](https://discuss.openedx.org/u/feanil)\
**Post date:** [December 16, 2025, 3:09pm UTC](https://discuss.openedx.org/t/security-upcoming-security-release-for-edx-platform-on-2025-12-16/17787/3 "2025-12-16T15:09:54Z")

</div>

The change will be released in 2 hours.

---

<div class="post-metadata">

**Author:** ![feanil](https://sea2.discourse-cdn.com/flex020/user_avatar/discuss.openedx.org/feanil/32/37_2.png) [@feanil](https://discuss.openedx.org/u/feanil)\
**Post date:** [December 16, 2025, 5:02pm UTC](https://discuss.openedx.org/t/security-upcoming-security-release-for-edx-platform-on-2025-12-16/17787/4 "2025-12-16T17:02:06Z")

</div>

The fix has been merged to master: [Merge commit from fork · openedx/edx-platform@05d0d09 · GitHub](https://github.com/openedx/edx-platform/commit/05d0d0936daf82c476617257aa6c35f0cd4ca060)

The Backport PRs to Teak and Ulmo will land shortly:

- [feanil/teak limited staff fix by feanil · Pull Request #37772 · openedx/edx-platform · GitHub](https://github.com/openedx/edx-platform/pull/37772)
- [fix: CourseLimitedStaffRole should not be able to access studio. by feanil · Pull Request #37773 · openedx/edx-platform · GitHub](https://github.com/openedx/edx-platform/pull/37773)

---

<div class="post-metadata">

**Author:** ![feanil](https://sea2.discourse-cdn.com/flex020/user_avatar/discuss.openedx.org/feanil/32/37_2.png) [@feanil](https://discuss.openedx.org/u/feanil)\
**Post date:** [December 18, 2025, 4:10pm UTC](https://discuss.openedx.org/t/security-upcoming-security-release-for-edx-platform-on-2025-12-16/17787/5 "2025-12-18T16:10:33Z")

</div>

Fixes have landed on `master`, `release/ulmo` and `release/teak`.