openedx has 2 CVEs on record. 2 were published in the last 90 days. The median CVSS is 5.2 (medium).
CVEs per month
Last 12 months, by publish date
1025/101125/111225/120126/010226/020326/030426/040526/050626/060726/070826/080926/09
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 5.2
- Publish → KEV
- —
- Last 90 days
- 2 prev 0
2
Total CVEs
0
Critical
0
CISA KEV
0
Exploited
openedx vulnerabilities
CVEs affecting openedx, newest first. Open any entry for full detail, references, and exploit status.
2 CVEsRSS
CVE-2026-85272Medium· 4.3PoCOpen edX Platform enables the authoring and delivery of online learning at any scale
Open edX Platform enables the authoring and delivery of online learning at any scale. From Aspen.1 until Ulmo and Verawood.1, openedx/core/lib/extract_archive.py uses _is_bad_path to validate safe_extractall targets by comparing resolved…
▾ Twilightopenedx · openedx-platformEPSS 0.33%via NVD
CVE-2026-85271Medium· 6.1Open edX Platform enables the authoring and delivery of online learning at any scale
Open edX Platform enables the authoring and delivery of online learning at any scale. From Redwood until Ulmo and Verawood.1, the add_additional_attributes_to_notifications function in openedx/core/djangoapps/notifications/email/utils.py…
▾ Sunlitopenedx · openedx-platformEPSS 0.20%via NVD