Vulnerabilities

TI-2026-32607 CVE-2026-44720 · GHSA-223g-f5mq-gw33

OpenLearnX: Critical Authentication Bypass via JWT Signature Verification Disabled Leading to Account Takeover

LOW 36

OpenLearnX is an open-source, decentralized learning and assessment platform.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00207 Published 2026-05-27 Fixed in 2.0.4 CWE-287

TI-2026-30130 CVE-2026-41575

th30d4y/IP: DOM-Based Cross-Site Scripting (XSS) Vulnerability

LOW 26

In th30d4y/IP from version 1.0.1 to before version 2.0.1, a DOM-Based Cross-Site Scripting (XSS) vulnerability was identified in an IP Reputation Checker application.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00181 Published 2026-05-08 Fixed in 2.0.1 CWE-79

TI-2026-30302 CVE-2026-41900 · GHSA-8h25-q488-4hxw

OpenLearnX has Critical Remote Code Execution Through Python Sandbox Escape via Code Execution Environment

MEDIUM 45

OpenLearnX is an open-source, decentralized learning and assessment platform.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.0091 Published 2026-05-08 Fixed in 2.0.3 CWE-250

Vulnerabilities

Filters

OpenLearnX: Critical Authentication Bypass via JWT Signature Verification Disabled Leading to Account Takeover

th30d4y/IP: DOM-Based Cross-Site Scripting (XSS) Vulnerability

OpenLearnX has Critical Remote Code Execution Through Python Sandbox Escape via Code Execution Environment