Approved changes feed: RSS · Atom

cpe:2.3:a:th30d4y:openlearnx:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorTh30D4Y (15957fd1-d63a-53b6-9bc8-027e4194049c)
ProductOpenlearnx (851ff936-79c4-5de0-931f-8614c08f44a7)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/th30d4y/openlearnx purl2cpe 2026-06-01 10:11:41.283271

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-44720 vulnerable 2026-06-08 08:05:11.288303 OpenLearnX: Critical Authentication Bypass via JWT Signature Verification Disabled Leading to Account Takeover
OpenLearnX is an open-source, decentralized learning and assessment platform. Prior to 2.0.4, a critical authentication vulnerability was identified in OpenLearnX that could allow unauthorized access to user accounts under specific conditions. This vulnerability is fixed in 2.0.4.
Published: 2026-05-27T21:02:29.706Z
Updated: 2026-06-02T18:09:07.056Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-41900 vulnerable 2026-06-08 08:03:15.743675 OpenLearnX has Critical Remote Code Execution Through Python Sandbox Escape via Code Execution Environment
HIGH (8.8)
OpenLearnX is an open-source, decentralized learning and assessment platform. Prior to version 2.0.3, a remote code execution (RCE) vulnerability was identified in the OpenLearnX code execution environment, allowing sandbox escape and arbitrary command execution. This issue has been patched in version 2.0.3.
Published: 2026-05-08T03:25:50.286Z
Updated: 2026-05-08T12:54:17.267Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.