Nixpkgs Security Tracker

Login with GitHub

Details of issue NIXPKGS-2026-0042

NIXPKGS-2026-0042
published on 18 Jan 2026
updated 4 days, 6 hours ago by @LeSuisse Activity log
  • Created automatic suggestion
  • @LeSuisse removed package moodle-dl
  • @LeSuisse removed maintainer @freezeboy
  • @LeSuisse accepted as draft
  • @LeSuisse published on GitHub
Moodle: possible to bypass mfa

A serious authentication flaw allowed attackers with valid credentials to bypass multi-factor authentication under certain conditions, potentially compromising user accounts.

Affected products

moodle
  • <4.4.11
  • <4.5.7
  • <5.0.3

Matching in nixpkgs

pkgs.moodle

Free and open-source learning management system (LMS) written in PHP