Open edX Platform enables the authoring and delivery of online learning at any scale. The HTML sanitizer clean_thread_html_body() used for discussion notification emails fails to remove
{
"cna_assigner": "GitHub_M",
"cwe_ids": [
"CWE-79"
],
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/42xxx/CVE-2026-42857.json",
"unresolved_ranges": [
{
"extracted_events": [
{
"fixed": "cddc25cd791bb78f76833896e4778f668861df12"
},
{
"introduced": "sumac"
},
{
"fixed": "ulmo"
}
],
"source": "AFFECTED_FIELD"
}
]
}