Security: Upcoming Security Release for openedx-platform

Security patches for openedx/openedx-platform will be added to the Ulmo and Verawood releases and to the current github master branch around 2026-10-27T14:00:00Z.

They will fix five security defects: two with a “critical” and three with a “moderate” CVSS 4.0 severity rating.

Details will be published here after release:

We the publishing of these issues was delayed and is re-scheduled for 2026-10-29T14:30:00Z

Sorry for any inconvenience this may have caused.

Patches have been made to Ulmo, Verawood and Master and all advisories are public. Patch commits can be found at the bottom of each advisory.