~ / search / GHSA-5r85-6h7f-rg3r

GHSA-5r85-6h7f-rg3r

Moodle's non-searchable tags can still be discovered on the tag search page and in the tags block

Source: GitHub Advisory Database (reviewed) Moderate CVE-2025-26527

Packages

EcosystemPackageAffectedFixed in
Packagist moodle/moodle >= 4.5.0-beta, < 4.5.2 4.5.2
Packagist moodle/moodle >= 4.4.0-beta, < 4.4.6 4.4.6
Packagist moodle/moodle >= 4.3.0-beta, < 4.3.10 4.3.10
Packagist moodle/moodle < 4.1.16 4.1.16

Details

As written in the advisory (Markdown source, shown as plain text).

Tags not expected to be visible to a user could still be discovered by them via the tag search page or in the tags block.

References

External links from the advisory. They lead to third-party sites.