Nixpkgs Security Tracker

Login with GitHub

Details of issue NIXPKGS-2026-0040

NIXPKGS-2026-0040
published on 18 Jan 2026
updated 4 days, 6 hours ago by @LeSuisse Activity log
  • Created automatic suggestion
  • @LeSuisse removed package moodle-dl
  • @LeSuisse removed
    2 maintainers
    • @kmein
    • @freezeboy
  • @LeSuisse accepted as draft
  • @LeSuisse published on GitHub
Moodle: router produces json instead of 404 error for invalid course id

The router’s inconsistent response to invalid course IDs allowed attackers to infer which course IDs exist, potentially aiding reconnaissance.

Affected products

moodle
  • <5.0.3

Matching in nixpkgs

pkgs.moodle

Free and open-source learning management system (LMS) written in PHP