Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:composer/moodle/moodle@5.1.1
purl pkg:composer/moodle/moodle@5.1.1
Next non-vulnerable version 5.1.2
Latest non-vulnerable version 5.1.2
Risk score 3.2
Vulnerabilities affecting this package (2)
Advisory Summary Fixed in package version
GHSA-cg8j-5cr2-568q
Aliases:
CVE-2026-26047
Moodle TeX formula editor is vulnerable to DoS through lack of execution time limits A Denial of Service vulnerability was …
5.1.2
Not vulnerable
GHSA-ggxq-2mg9-8966
Aliases:
CVE-2026-26045
Moodle has a Remote Code Execution risk via file restore A flaw was identified in Moodle’s backup restore functionality where …
5.1.2
Not vulnerable
Vulnerabilities fixed by this package (10)

Advisory Summary Aliases
GHSA-mhf6-pp52-8wqj
Moodle Cross-site Scripting (XSS) vulnerability A flaw was found in Moodle. This Cross-site Scripting (XSS) vulnerability, caused by improper sanitization … CVE-2025-67849
GHSA-j5jv-w5cw-j9ff
Moodle authentication bypass vulnerability A flaw was found in Moodle. This authentication bypass vulnerability allows suspended users to authenticate through … CVE-2025-67848
GHSA-5cx4-w4fh-fr57
Moodle Affected by Improper Restriction of Excessive Authentication Attempts A flaw was found in Moodle. A remote attacker could exploit … CVE-2025-67853
GHSA-vwhw-vp9v-q9c9
Moodle vulnerable to Cross-site Scripting A flaw was found in Moodle. A remote attacker could exploit a reflected Cross-Site Scripting … CVE-2025-67855
GHSA-qv78-6gpp-hm68
Moodle Open Redirect vulnerability A flaw was found in Moodle. An Open Redirect vulnerability in the OAuth login flow allows … CVE-2025-67852
GHSA-hcm6-q6pc-xfhm
Moodle has an authorization logic flaw A flaw was found in Moodle. An authorization logic flaw, specifically due to incomplete … CVE-2025-67856
GHSA-qfh6-h7j6-fvjv
Moodle formula injection vulnerability A flaw was found in Moodle. This formula injection vulnerability occurs when data fields are exported … CVE-2025-67851
GHSA-8jrv-wx83-w3xj
Moodle Inserts Sensitive Information Into Sent Data A flaw was found in moodle. During anonymous assignment submissions, user identifiers were … CVE-2025-67857
GHSA-6mmv-f6c6-v6q8
Moodle vulnerable to Cross-site Scripting A flaw was found in Moodle. This vulnerability, known as Cross-site Scripting (XSS), occurs due … CVE-2025-67850
GHSA-xvmh-25jw-gmmm
Moodle affected by a code injection vulnerability A flaw was found in Moodle. An attacker with access to the restore … CVE-2025-67847