{"action":"Upgrade openlearnx to 2.0.3 or later.","affected":[{"fixed":"2.0.3","introduced":"0"}],"component":"openlearnx","cve_ids":["CVE-2026-41900"],"ecosystem":"npm","epss":0.0091,"exploited":false,"fixed_versions":["2.0.3"],"ghsa_id":"GHSA-8h25-q488-4hxw","id":"tcs_01M5KFD0BXZTC69NS06S7NNC81","modified_at":"2026-05-11T14:12:50.584064Z","published_at":"2026-04-23T21:46:07Z","references":["https://osv.dev/vulnerability/GHSA-8h25-q488-4hxw","https://github.com/th30d4y/OpenLearnX/security/advisories/GHSA-8h25-q488-4hxw","https://nvd.nist.gov/vuln/detail/CVE-2026-41900","https://github.com/th30d4y/OpenLearnX/commit/14765d7d1856d564747c55c5412e2f38feab079e","https://github.com/th30d4y/OpenLearnX","https://github.com/th30d4y/OpenLearnX/releases/tag/v2.0.3-security-fix"],"severity":{"label":"high","score":8.8},"sources":[{"source":"osv","source_id":"GHSA-8h25-q488-4hxw","url":"https://osv.dev/vulnerability/GHSA-8h25-q488-4hxw"}],"summary":"OpenLearnX has Critical Remote Code Execution Through Python Sandbox Escape via Code Execution Environment"}