Security patches for openedx/openedx-platform will be added to the Ulmo and Verawood releases and to the current github master branch around 2026-10-27T14:00:00Z.
They will fix five security defects: two with a “critical” and three with a “moderate” CVSS 4.0 severity rating.
Details will be published here after release:
- GHSA-hh7c-hrv9-6qw9 (critical)
- GHSA-2vm4-4f35-jgpv (critical)
- GHSA-fpx7-53j2-fc79 (moderate)
- GHSA-3gx3-8wpj-4qc2 (moderate)
- GHSA-863f-jpf7-cqhq (moderate)