GHSA-8h25-q488-4hxw
High · 8.8CVSS
8.8
EPSS
—
Published
Apr 23, 2026
CISA due date
—
The record
OpenLearnX has Critical Remote Code Execution Through Python Sandbox Escape via Code Execution Environment
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| npm | openlearnx | 0 | 2.0.3 |
Related vulnerabilities
- CVE-2026-41900 OpenLearnX is an open-source, decentralized learning and assessment platform. Same vulnerability
- CVE-2026-44720 OpenLearnX is an open-source, decentralized learning and assessment platform. Also affects openlearnx
- GHSA-223g-f5mq-gw33 OpenLearnX: Critical Authentication Bypass via JWT Signature Verification Disabled… Also affects openlearnx
- CVE-2026-79942 Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions… CWE-250
- CVE-2026-87506 Privilege elevation in WebUI in Google Chrome prior to 153.0.8010.36 allowed a remote… CWE-250
- CVE-2026-69464 Execution with unnecessary privileges in Microsoft Office SharePoint allows an authorized… CWE-250
- CVE-2026-69409 Execution with unnecessary privileges in Microsoft Office SharePoint allows an authorized… CWE-250
- CVE-2026-80238 Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions… CWE-250