What is GHSA-p92f-pg8m-v46g?

GHSA-p92f-pg8m-v46g is a security advisory published by GitHub Security Advisories with Low severity. An insecure direct object reference vulnerability in Koollab LMS allowed an authenticated user to...

Which CVE IDs does GHSA-p92f-pg8m-v46g cover?

GHSA-p92f-pg8m-v46g covers the following CVE IDs: CVE-2026-63241. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-p92f-pg8m-v46g?

GHSA-p92f-pg8m-v46g has a CVSS v3 base score of 3.1, published by GitHub Security Advisories.

GHSA-p92f-pg8m-v46gLowCVSS 3.1

An insecure direct object reference vulnerability in Koollab LMS allowed an authenticated user to...

Vendor

GitHub Security Advisories

Published

July 29, 2026

Last Modified

July 29, 2026

🔗 CVE IDs covered (1)

CVE-2026-63241 →

📋 Description

An insecure direct object reference vulnerability in Koollab LMS allowed an authenticated user to query the course completion progress of any other user without authorisation, disclosing private learning progress information.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-63241
https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-094
https://github.com/advisories/GHSA-p92f-pg8m-v46g