agentprime: openedx-platformEvery new CVE for openedx-platform.https://agentprime.io/CVE-2026-97702: Open edX: Support "manage_course_team" REST API omits the `require_support_permission` gate its sibling support views enforcehttps://agentprime.io/advisories/CVE-2026-97702/https://agentprime.io/advisories/CVE-2026-97702/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 04 Nov 2026 22:51:25 GMTCVECVE-2026-85271: Open edX Platform: Stored CSS Injection in Email Digest Notifications via Unsanitized Thread Title (incomplete patch of CVE-2026-42857)https://agentprime.io/advisories/CVE-2026-85271/https://agentprime.io/advisories/CVE-2026-85271/CVSS 6.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 18 Sep 2026 20:38:40 GMTCVECVE-2026-85272: Open edX Platform: Path traversal via prefix-bypass in safe_extractall Path Validationhttps://agentprime.io/advisories/CVE-2026-85272/https://agentprime.io/advisories/CVE-2026-85272/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 18 Sep 2026 20:27:44 GMTCVECVE-2026-55421: Open edX Platform: SSRF in Studio Video Download Endpointhttps://agentprime.io/advisories/CVE-2026-55421/https://agentprime.io/advisories/CVE-2026-55421/CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 02 Sep 2026 16:54:28 GMTCVECVE-2026-53636: Open edX LTI OAuth Replay Attackhttps://agentprime.io/advisories/CVE-2026-53636/https://agentprime.io/advisories/CVE-2026-53636/CVSS 4.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 02 Sep 2026 16:54:10 GMTCVECVE-2026-53635: Open edX Platform: Insufficient Permission on set_course_mode_price()https://agentprime.io/advisories/CVE-2026-53635/https://agentprime.io/advisories/CVE-2026-53635/CVSS 7.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 02 Sep 2026 16:53:36 GMTCVECVE-2026-42857: Open edX Platform: Stored CSS Injection in Email Notifications via Incomplete HTML Sanitizationhttps://agentprime.io/advisories/CVE-2026-42857/https://agentprime.io/advisories/CVE-2026-42857/CVSS 4.6 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 11 May 2026 17:32:40 GMTCVECVE-2026-42858: Open edX Platform: Server-Side Request Forgery (SSRF) in SAML Provider Data Sync Endpointhttps://agentprime.io/advisories/CVE-2026-42858/https://agentprime.io/advisories/CVE-2026-42858/CVSS 8.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 11 May 2026 17:30:59 GMTCVECVE-2026-35404: Open edX Platform has an Open Redirect in Survey Views via Unvalidated redirect_url Parameterhttps://agentprime.io/advisories/CVE-2026-35404/https://agentprime.io/advisories/CVE-2026-35404/CVSS 4.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 06 Apr 2026 21:22:29 GMTCVECVE-2026-34736: Open edX Platform: Account Activation Bypass via activation_key Exposure in REST APIhttps://agentprime.io/advisories/CVE-2026-34736/https://agentprime.io/advisories/CVE-2026-34736/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 02 Apr 2026 18:29:01 GMTCVE