Oppia vulnerabilities

Products

• Oppia 3

Newest

• oppia Oppia through 3.5.2 Missing Authorization on AdminRoleHandler GET CVE-2026-85210 5.3 MediumSeptember 3, 2026
• oppia Timing Attack Reveals CSRF Tokens in oppia CVE-2023-40021 5.3 MediumAugust 16, 2023
• oppia Oppia 3.1.4 does not verify that certain URLs are valid before navigating to them. CVE-2021-41733 6.1 MediumNovember 8, 2021