# Security: Upcoming Security Release for openedx-platform

**URL:** <https://discuss.openedx.org/t/security-upcoming-security-release-for-openedx-platform/20020>\
**Category:** Security\
**Created:** [October 23, 2026, 7:41pm UTC](https://discuss.openedx.org/t/security-upcoming-security-release-for-openedx-platform/20020 "2026-10-23T19:41:29Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![feanil](https://sea2.discourse-cdn.com/flex020/user_avatar/discuss.openedx.org/feanil/32/37_2.png) [@feanil](https://discuss.openedx.org/u/feanil)\
**Post date:** [October 23, 2026, 7:41pm UTC](https://discuss.openedx.org/t/security-upcoming-security-release-for-openedx-platform/20020/1 "2026-10-23T19:41:29Z")

</div>

Security patches for **openedx/openedx-platform** will be added to the **Ulmo** and **Verawood** releases and to the current github master branch around 2026-10-27T14:00:00Z.

They will fix five security defects: two with a “critical” and three with a “moderate” [CVSS 4.0 severity rating](https://nvd.nist.gov/vuln-metrics/cvss).

Details will be published here after release:

- [GHSA-hh7c-hrv9-6qw9](https://github.com/openedx/openedx-platform/security/advisories/GHSA-hh7c-hrv9-6qw9) (critical)
- [GHSA-2vm4-4f35-jgpv](https://github.com/openedx/openedx-platform/security/advisories/GHSA-2vm4-4f35-jgpv) (critical)
- [GHSA-fpx7-53j2-fc79](https://github.com/openedx/openedx-platform/security/advisories/GHSA-fpx7-53j2-fc79) (moderate)
- [GHSA-3gx3-8wpj-4qc2](https://github.com/openedx/openedx-platform/security/advisories/GHSA-3gx3-8wpj-4qc2) (moderate)
- [GHSA-863f-jpf7-cqhq](https://github.com/openedx/openedx-platform/security/advisories/GHSA-863f-jpf7-cqhq) (moderate)

---

<div class="post-metadata">

**Author:** ![feanil](https://sea2.discourse-cdn.com/flex020/user_avatar/discuss.openedx.org/feanil/32/37_2.png) [@feanil](https://discuss.openedx.org/u/feanil)\
**Post date:** [October 28, 2026, 1:59pm UTC](https://discuss.openedx.org/t/security-upcoming-security-release-for-openedx-platform/20020/2 "2026-10-28T13:59:03Z")

</div>

We the publishing of these issues was delayed and is re-scheduled for 2026-10-29T14:30:00Z

Sorry for any inconvenience this may have caused.

---

<div class="post-metadata">

**Author:** ![feanil](https://sea2.discourse-cdn.com/flex020/user_avatar/discuss.openedx.org/feanil/32/37_2.png) [@feanil](https://discuss.openedx.org/u/feanil)\
**Post date:** [October 29, 2026, 4:38pm UTC](https://discuss.openedx.org/t/security-upcoming-security-release-for-openedx-platform/20020/3 "2026-10-29T16:38:40Z")

</div>

Patches have been made to Ulmo, Verawood and Master and all advisories are public. Patch commits can be found at the bottom of each advisory.