In certain configuration cases, when a learning path is configured as semi-private, anonymous users are allowed to join a learning path when they should not.
{ "constraint": "<1.4.0" }
"<1.4.0"
"https://github.com/DrupalSecurityTeam/drupal-advisory-database/blob/main/advisories/opigno_learning_path/DRUPAL-CONTRIB-2019-047.json"