A security patch for openedx/platform-plugin-aspects will be added for all releases from Redwood to the current unreleased code around 2026-10-02T14:00:00Z.
It will fix one security defect with a “high” CVSS 3.1 severity rating.
Details will be published here after release: GitHub security advisory
Update, I had originally scored this as a “moderate” defect but I’m upgrading it to “high” severity upon re-review.
Details can be found in the advisory once it’s published momentarily.
The security advisory is now available along with remediation steps. Please take the updates as soon as possible. If you run into any issues please note them here or find me in Slack and we will update the instructions as necessary.