Security: Upcoming Security Release for openedx-platform and edx-enterprise

[feanil (Feanil Patel)]

On 2026-04-24T14:00:00Z we will be releasing fixes for two defects to openedx-platform as well as one defect in the edx-enterprise repository. The fixes will be merged to the default branch of those repositories as well as to the ulmo branch, and the verawood branch if it has been cut.

• edx-enterprise Issue
  • CVSS Score: High
  • Security Advisory
• openedx-platform Issues
  • Issue 1
    • CVSS Score: Moderate
    • Security Advisory
  • Issue 2
    • CVSS Score: High
    • Security Advisory

Details will be available at the linked advisories once the fixes have been released.

[robrap (Robert Raposa)]

Thanks. I presume the edx-enterprise fix will also come with an edx-platform upgrade to the edx-enterprise dependency?

[feanil (Feanil Patel)]

yep, that PR is waiting for tests to pass but will be merged shortly feat: Upgrade Python dependency edx-enterprise by github-actions[bot] · Pull Request #38445 · openedx/openedx-platform · GitHub

[feanil (Feanil Patel)]

Closing the loop, all the fixes landed on the default branches and were backported to ulmo