Nixpkgs Security Tracker

Login with GitHub

Details of issue NIXPKGS-2026-0043

NIXPKGS-2026-0043
published on 18 Jan 2026
updated 4 days, 6 hours ago by @LeSuisse Activity log
  • Created automatic suggestion
  • @LeSuisse removed package moodle-dl
  • @LeSuisse removed maintainer @freezeboy
  • @LeSuisse accepted as draft
  • @LeSuisse published on GitHub
Moodle: router (r.php) could expose application directories

An error-handling issue in the Moodle router (r.php) could cause the application to display internal directory listings when specific HTTP headers were not properly configured.

Affected products

moodle
  • <4.5.7
  • <5.0.3

Matching in nixpkgs

pkgs.moodle

Free and open-source learning management system (LMS) written in PHP