Skip to content
OpenAdvisories

Vendor

inducer

4 known vulnerabilities.

Products

relate 4
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 8.7
    CVE-2026-47161

    RELATE Vulnerable to Remote Code Execution (RCE) via Insecure Celery Pickle Deserialization

    RELATE is a web-based courseware package. Prior to commit d66ba5659b459bf1ba56b7109b5f9ecf197cbefb, RELATE LMS configures its Celery workers to accept and deserialize untrusted 'pickle' data. An attacker who can reach the message broker can execute arbitrary …

    inducer relate
  • High 8.7
    CVE-2026-42197

    RELATE Vulnerable to Stored XSS via Unprivileged User Profile

    RELATE is a web-based courseware package. Versions prior to commit 555f0efb1c5bd7531c07cd73724d7e566a81f620 have a stored cross-site scripting vulnerability that allows any enrolled student to execute arbitrary JavaScript in an administrator's browser session…

    inducer relate
  • High 8.7
    CVE-2026-41505

    RELATE: Predictable Token Generation in auth.py and exam.py

    RELATE is a web-based courseware package. Prior to commit 2f68e16, RELATE is vulnerable to predictable token generation in auth.py's make_sign_in_key() function and exam.py's gen_ticket_code() function. This issue has been patched via commit 2f68e16.

    inducer relate