Security

Report a vulnerability

SECURITY.md

Security Policy

Reporting a Vulnerability

Please report security issues to eclass@gunet.gr

File Upload Filter Bypass via ZIP Archive Extraction
GHSA-3g4j-56gp-v6wv published Feb 3, 2026 by jexi

Moderate
Stored Cross-Site Scripting (XSS) in Multiple High-Privilege User Fields
GHSA-2x83-4fh2-fcw7 published Feb 3, 2026 by jexi

Moderate
Stored Cross-Site Scripting (XSS) in User Profile Fields
GHSA-3p2x-qgxw-qvxh published Feb 3, 2026 by jexi

High
CSRF in Teacher-Restricted Endpoints Allows Unauthorized Actions
GHSA-cgmh-73qg-28fm published Feb 3, 2026 by jexi

Moderate
Stored Cross-Site Scripting (XSS) via Student Assignment Upload
GHSA-2qgm-m7fm-m888 published Feb 3, 2026 by jexi

High
Broken Access Control Allows Students to Add Content to Course Units
GHSA-22cq-9fr7-fq6v published Feb 3, 2026 by jexi

Moderate
Broken Access Control in Course Units Module Allows Students to Create Units
GHSA-4jf5-636r-hv9v published Feb 3, 2026 by jexi

Moderate
Username Enumeration via Login Response Discrepancies
GHSA-c3wq-m629-5h2j published Feb 3, 2026 by jexi

Moderate
Active Sessions Not Invalidated After Password Change Allow Persistent Account Access
GHSA-5h73-53mh-m224 published Feb 3, 2026 by jexi

Moderate
Insecure Password Reset Token Reuse Enables Account Takeover
GHSA-gcqq-fxw6-f866 published Feb 3, 2026 by jexi

High

Learn more about advisories related to gunet/openeclass in the GitHub Advisory Database