moodle/moodle Security Advisories for v4.3.2 (71)
-
[MEDIUM] Moodle allows IDOR when accessing the cohorts report
PKSA-bctf-nmjy-ynnz CVE-2025-3647 GHSA-34g7-pg9j-pxgp
Affected version: >=4.5.0-beta,<4.5.4|>=4.4.0-beta,<4.4.8|>=4.3.0-beta,<4.3.12|<4.1.18
Reported by:
GitHub -
[LOW] Moodle has a CSRF risk in user tours manager that allows tour duplication
PKSA-jwzm-wkm8-x9qp CVE-2025-3635 GHSA-88xj-97gf-7wpq
Affected version: >=4.5.0-beta,<4.5.4|>=4.4.0-beta,<4.4.8|>=4.3.0-beta,<4.3.12|<4.1.18
Reported by:
GitHub -
[MEDIUM] Moodle allows IDOR in RSS block, which allows access to additional RSS feeds
PKSA-848d-b4jc-r4z3 CVE-2025-3636 GHSA-chmf-m33p-ph8m
Affected version: >=4.5.0-beta,<4.5.4|>=4.4.0-beta,<4.4.8|>=4.3.0-beta,<4.3.12|<4.1.18
Reported by:
GitHub -
[LOW] Moodle's mod_data edit/delete pages pass CSRF token in GET parameter
PKSA-fvfh-pt1s-3tmx CVE-2025-3637 GHSA-9vc3-vm42-fjhm
Affected version: >=4.5.0-beta,<4.5.4|>=4.4.0-beta,<4.4.8|>=4.3.0-beta,<4.3.12|<4.1.18
Reported by:
GitHub -
[LOW] Moodle has a CSRF risk in Brickfield tool's analysis request action
PKSA-ysbw-mxpt-3wtx CVE-2025-3638 GHSA-m8qh-hx4c-h9hr
Affected version: >=4.5.0-beta,<4.5.4|>=4.4.0-beta,<4.4.8|>=4.3.0-beta,<4.3.12|<4.1.18
Reported by:
GitHub -
[MEDIUM] Moodle has an IDOR in web service which allows users enrolled in a course to access some details of other users
PKSA-mj2r-6dr9-xghp CVE-2025-3640 GHSA-6g5x-h5x7-q4mq
Affected version: >=4.5.0-beta,<4.5.4|>=4.4.0-beta,<4.4.8|>=4.3.0-beta,<4.3.12|<4.1.18
Reported by:
GitHub -
[HIGH] Moodle has an authenticated remote code execution risk in the Moodle LMS Dropbox repository
PKSA-9jfc-tg5h-yj5b CVE-2025-3641 GHSA-c8v6-vxhf-wcrr
Affected version: >=4.5.0-beta,<4.5.4|>=4.4.0-beta,<4.4.8|>=4.3.0-beta,<4.3.12|<4.1.18
Reported by:
GitHub -
[HIGH] Moodle has an authenticated remote code execution risk in the Moodle LMS EQUELLA repository
PKSA-8gd9-7npk-ym55 CVE-2025-3642 GHSA-m367-445c-2xqr
Affected version: >=4.5.0-beta,<4.5.4|>=4.4.0-beta,<4.4.8|>=4.3.0-beta,<4.3.12|<4.1.18
Reported by:
GitHub -
[MEDIUM] Moodle has reflected Cross-site Scripting risk in policy tool
PKSA-8sfx-6cpy-w558 CVE-2025-3643 GHSA-hxgg-4qww-85ph
Affected version: >=4.5.0-beta,<4.5.4|>=4.4.0-beta,<4.4.8|>=4.3.0-beta,<4.3.12|<4.1.18
Reported by:
GitHub -
[MEDIUM] Moodle's AJAX section delete does not respect course_can_delete_section()
PKSA-g3j3-qxjm-3zq6 CVE-2025-3644 GHSA-cpm7-mv33-jwf8
Affected version: >=4.5.0-beta,<4.5.4|>=4.4.0-beta,<4.4.8|>=4.3.0-beta,<4.3.12|<4.1.18
Reported by:
GitHub -
[MEDIUM] Moodle has an IDOR in messaging web service which allows access to some user details
PKSA-pr46-vm59-kn4p CVE-2025-3645 GHSA-pj96-xh2w-fgqx
Affected version: >=4.5.0-beta,<4.5.4|>=4.4.0-beta,<4.4.8|>=4.3.0-beta,<4.3.12|<4.1.18
Reported by:
GitHub -
[MEDIUM] Moodle shows hidden grades to users without permission on some grade reports
PKSA-d7vn-pt6b-zj2h CVE-2025-32045 GHSA-8m7c-hm88-2p97
Affected version: >=4.5.0-beta,<4.5.3|>=4.4.0-beta,<4.4.7|>=4.3.0-beta,<4.3.11|<4.1.17
Reported by:
GitHub -
[MEDIUM] Moodle makes some user data available before completing second factor with MFA enabled
PKSA-t8h6-8c8g-v64h CVE-2025-3627 GHSA-x45j-jq9q-gf3q
Affected version: >=4.5.0-beta,<4.5.4|>=4.4.0-beta,<4.4.8|>=4.3.0-beta,<4.3.12
Reported by:
GitHub -
[MEDIUM] Moodle self enrollment available before completing second factor with MFA enabled
PKSA-wkvg-pjc4-695g CVE-2025-3634 GHSA-qhc7-xhc2-7p7w
Affected version: >=4.5.0-beta,<4.5.4|>=4.4.0-beta,<4.4.8|>=4.3.0-beta,<4.3.12
Reported by:
GitHub -
[HIGH] Moodle has an arbitrary file read risk through pdfTeX
PKSA-tbqf-gy2t-9549 CVE-2025-26525 GHSA-4hmr-39vp-xfrr
Affected version: <4.1.16|>=4.3.0-beta,<4.3.10|>=4.4.0-beta,<4.4.6|>=4.5.0-beta,<4.5.2
Reported by:
GitHub -
[MEDIUM] Moodle's feedback response viewing and deletions did not respect Separate Groups mode
PKSA-1xfj-78ck-68m3 CVE-2025-26526 GHSA-pxg4-xjp7-w9c5
Affected version: <4.1.16|>=4.3.0-beta,<4.3.10|>=4.4.0-beta,<4.4.6|>=4.5.0-beta,<4.5.2
Reported by:
GitHub -
[MEDIUM] Moodle's non-searchable tags can still be discovered on the tag search page and in the tags block
PKSA-zx9m-rnqj-bycy CVE-2025-26527 GHSA-5r85-6h7f-rg3r
Affected version: <4.1.16|>=4.3.0-beta,<4.3.10|>=4.4.0-beta,<4.4.6|>=4.5.0-beta,<4.5.2
Reported by:
GitHub -
[LOW] Moodle has a stored XSS in ddimageortext question type
PKSA-19h3-t8f4-j9qr CVE-2025-26528 GHSA-h697-w4ph-7pcx
Affected version: <4.1.16|>=4.3.0-beta,<4.3.10|>=4.4.0-beta,<4.4.6|>=4.5.0-beta,<4.5.2
Reported by:
GitHub -
[HIGH] Moodle has a stored XSS risk in admin live log
PKSA-bqpz-gp92-yhbn CVE-2025-26529 GHSA-wr88-x8cm-7cgq
Affected version: <4.1.16|>=4.3.0-beta,<4.3.10|>=4.4.0-beta,<4.4.6|>=4.5.0-beta,<4.5.2
Reported by:
GitHub -
[HIGH] Moodle allows reflected XSS via question bank filter
PKSA-jzzd-hb2w-cy7z CVE-2025-26530 GHSA-4w32-c9g7-27qx
Affected version: >=4.3.0-beta,<4.3.10|>=4.4.0-beta,<4.4.6|>=4.5.0-beta,<4.5.2
Reported by:
GitHub -
[LOW] Moodle has an IDOR in badges allows disabling of arbitrary badges
PKSA-6qw2-86sq-nszm CVE-2025-26531 GHSA-g88w-v4cq-qgcp
Affected version: <4.1.16|>=4.3.0-beta,<4.3.10|>=4.4.0-beta,<4.4.6|>=4.5.0-beta,<4.5.2
Reported by:
GitHub -
[LOW] Moodle allows teachers to evade trusttext config when restoring glossary entries
PKSA-2t2j-mwq1-3v3v CVE-2025-26532 GHSA-cw24-f6fq-7j9v
Affected version: <4.1.16|>=4.3.0-beta,<4.3.10|>=4.4.0-beta,<4.4.6|>=4.5.0-beta,<4.5.2
Reported by:
GitHub -
[HIGH] Moodle has a SQL injection risk in course search module list filter
PKSA-6vk5-pjgr-yssn CVE-2025-26533 GHSA-rg56-94j7-hjx9
Affected version: <4.1.16|>=4.3.0-beta,<4.3.10|>=4.4.0-beta,<4.4.6|>=4.5.0-beta,<4.5.2
Reported by:
GitHub -
[MEDIUM] Moodle allows users to retrieve information they did not have permission to access
PKSA-wjgr-krfv-d7mf CVE-2024-45689 GHSA-j822-x5gg-5r56
Affected version: >=4.4.0-beta,<4.4.3|>=4.3.0-beta,<4.3.7|>=4.2.0-beta,<4.2.10|<4.1.13
Reported by:
GitHub -
[MEDIUM] Moodle IDOR when deleting OAuth2 linked accounts
PKSA-qgvt-ww2j-46z8 CVE-2024-45690 GHSA-fhg2-r2h9-h7q8
Affected version: >=4.4.0-beta,<4.4.3|>=4.3.0-beta,<4.3.7|>=4.2.0-beta,<4.2.10|<4.1.13
Reported by:
GitHub -
[MEDIUM] Moodle Lesson activity password bypass through PHP loose comparison
PKSA-y22b-yrq9-2frq CVE-2024-45691 GHSA-xfv7-h2qg-rjm7
Affected version: >=4.4.0-beta,<4.4.3|>=4.3.0-beta,<4.3.7|>=4.2.0-beta,<4.2.10|<4.1.13
Reported by:
GitHub -
[MEDIUM] Moodle leaks user names
PKSA-rd93-2zrq-9hms CVE-2024-48896 GHSA-cq5f-wv7p-5gfc
Affected version: >=4.4.0,<4.4.4|>=4.3.0,<4.3.8|>=4.2.0,<4.2.11|<4.1.14
Reported by:
GitHub -
[MEDIUM] moodle: IDOR in edit/delete RSS feed
PKSA-hhpt-69ky-ds9w CVE-2024-48897 GHSA-x3x9-349x-2485
Affected version: >=4.4.0,<4.4.4|>=4.3.0,<4.3.8|>=4.2.0,<4.2.11|<4.1.14
Reported by:
GitHub -
[MEDIUM] moodle: Some users can delete audiences of other reports
PKSA-sbzz-bvbt-7fqv CVE-2024-48898 GHSA-fjq9-452g-jg3q
Affected version: >=4.4.0,<4.4.4|>=4.3.0,<4.3.8|>=4.2.0,<4.2.11|<4.1.14
Reported by:
GitHub -
[MEDIUM] moodle: IDOR when fetching report schedules
PKSA-b9zz-v9f7-k18v CVE-2024-48901 GHSA-mg54-p2wj-5ph7
Affected version: >=4.4.0,<4.4.4|>=4.3.0,<4.3.8|>=4.2.0,<4.2.11|<4.1.14
Reported by:
GitHub -
[MEDIUM] Moodle reflected XSS via H5P error message
PKSA-gdvk-459t-n53y CVE-2024-43439 GHSA-hjgc-jxjc-8v9j
Affected version: >=4.4.0-beta,<4.4.2|>=4.3.0-beta,<4.3.6|>=4.2.0-beta,<4.2.9|<4.1.12
Reported by:
GitHub -
[LOW] Moodle Cross-site Scripting vulnerability
PKSA-g8yy-dfw9-yn61 CVE-2024-43437 GHSA-4hjf-6pxr-549h
Affected version: <4.1.12|>=4.2.0,<4.2.9|>=4.3.0,<4.3.6|>=4.4.0,<4.4.2
Reported by:
GitHub -
[LOW] Moodle admin presets export tool includes some secrets that should not be exported
PKSA-vng5-wdz1-h5s8 CVE-2024-43427 GHSA-vpq5-56jj-vf2m
Affected version: <4.1.12|>=4.2.0,<4.2.9|>=4.3.0,<4.3.6|>=4.4.0,<4.4.2
Reported by:
GitHub -
[LOW] Moodle has user information visibility control issues in gradebook reports
PKSA-zdyc-3cpq-dzhz CVE-2024-43429 GHSA-c767-4whh-v7rw
Affected version: <4.1.12|>=4.2.0,<4.2.9|>=4.3.0,<4.3.6|>=4.4.0,<4.4.2
Reported by:
GitHub -
[LOW] Moodle authorization headers preserved between "emulated redirects"
PKSA-76sy-6846-dkkc CVE-2024-43432 GHSA-7wmp-2xmx-g6h8
Affected version: <4.1.12|>=4.2.0,<4.2.9|>=4.3.0,<4.3.6|>=4.4.0,<4.4.2
Reported by:
GitHub -
[LOW] Moodle's user/power level management inconsistent with suspended users
PKSA-hw2x-cxzg-1vf9 CVE-2024-43433 GHSA-q99x-mjmh-v8w7
Affected version: >=4.3.0,<4.3.6|>=4.4.0,<4.4.2
Reported by:
GitHub -
[LOW] Moodle has insufficient capability checks
PKSA-52b5-bb1k-6tvt CVE-2024-43435 GHSA-4gq2-x5w4-7hp8
Affected version: <4.1.12|>=4.2.0,<4.2.9|>=4.3.0,<4.3.6|>=4.4.0,<4.4.2
Reported by:
GitHub -
[HIGH] Moodle Remote Code Execution vulnerability
PKSA-b5gd-xb9k-3r4v CVE-2024-43425 GHSA-v6f4-v8h8-3c87
Affected version: >=4.4.0-beta,<4.4.2|>=4.3.0-beta,<4.3.6|>=4.2.0-beta,<4.2.9|<4.1.12
Reported by:
GitHub -
[MEDIUM] Moodle has arbitrary file read risk through pdfTeX
PKSA-c8xb-byc5-1chb CVE-2024-43426 GHSA-vjmm-r9gg-425m
Affected version: >=4.4.0-beta,<4.4.2|>=4.3.0-beta,<4.3.6|>=4.2.0-beta,<4.2.9|<4.1.12
Reported by:
GitHub -
[MEDIUM] Moodle vulnerable to cache poisoning via injection into storage
PKSA-wg88-91px-2xxt CVE-2024-43428 GHSA-2r9m-wg35-rfvc
Affected version: >=4.4.0-beta,<4.4.2|>=4.3.0-beta,<4.3.6|>=4.2.0-beta,<4.2.9|<4.1.12
Reported by:
GitHub -
[MEDIUM] Moodle's IDOR in badges allows deletion of arbitrary badges
PKSA-rxzs-qrdh-wvnm CVE-2024-43431 GHSA-wwjf-gwrv-wh45
Affected version: >=4.4.0-beta,<4.4.2|>=4.3.0-beta,<4.3.6|>=4.2.0-beta,<4.2.9|<4.1.12
Reported by:
GitHub -
[HIGH] Moodle has CSRF risk in Feedback non-respondents report
PKSA-sw85-d8w2-2fxq CVE-2024-43434 GHSA-x87r-37q5-mmr8
Affected version: >=4.4.0-beta,<4.4.2|>=4.3.0-beta,<4.3.6|>=4.2.0-beta,<4.2.9|<4.1.12
Reported by:
GitHub -
[MEDIUM] Moodle vulnerable to site administration SQL injection via XMLDB editor
PKSA-sbn5-p35x-1nwr CVE-2024-43436 GHSA-mx26-62xm-2p83
Affected version: >=4.4.0-beta,<4.4.2|>=4.3.0-beta,<4.3.6|>=4.2.0-beta,<4.2.9|<4.1.12
Reported by:
GitHub -
[MEDIUM] Moodle's IDOR in Feedback non-respondents report allows messaging arbitrary site users
PKSA-yzps-6hch-gh72 CVE-2024-43438 GHSA-p9cx-f595-h79h
Affected version: >=4.4.0-beta,<4.4.2|>=4.3.0-beta,<4.3.6|>=4.2.0-beta,<4.2.9|<4.1.12
Reported by:
GitHub -
[MEDIUM] Moodle LFI vulnerability when restoring malformed block backups
PKSA-9732-nw42-9zsm CVE-2024-43440 GHSA-qrqv-26gf-xgwh
Affected version: >=4.4.0-beta,<4.4.2|>=4.3.0-beta,<4.3.6|>=4.2.0-beta,<4.2.9|<4.1.12
Reported by:
GitHub -
[MEDIUM] Moodle BigBlueButton web service leaks meeting joining information
PKSA-pnzk-r5zq-ynpf CVE-2024-38273 GHSA-x29x-qwvx-fxr2
Affected version: <4.1.11|>=4.2.0-beta,<4.2.8|>=4.3.0-beta,<4.3.5|>=4.4.0-beta,<4.4.1
Reported by:
GitHub -
[MEDIUM] Moodle stored XSS via calendar's event title when deleting the event
PKSA-gstb-chkw-qtcd CVE-2024-38274 GHSA-p5cg-6rfr-6mx8
Affected version: <4.1.11|>=4.2.0-beta,<4.2.8|>=4.3.0-beta,<4.3.5|>=4.4.0-beta,<4.4.1
Reported by:
GitHub -
[MEDIUM] Moodle HTTP authorization header is preserved between "emulated redirects"
PKSA-g3r1-2nj3-qn37 CVE-2024-38275 GHSA-p2cj-86v4-7782
Affected version: <4.1.11|>=4.2.0-beta,<4.2.8|>=4.3.0-beta,<4.3.5|>=4.4.0-beta,<4.4.1
Reported by:
GitHub -
[MEDIUM] Moodle CSRF risks due to misuse of confirm_sesskey
PKSA-pwh8-w7s1-zt49 CVE-2024-38276 GHSA-356g-7x36-7m34
Affected version: <4.1.11|>=4.2.0-beta,<4.2.8|>=4.3.0-beta,<4.3.5|>=4.4.0-beta,<4.4.1
Reported by:
GitHub -
[MEDIUM] Moodle uses the same key for QR login and auto-login
PKSA-my4y-h475-7mp5 CVE-2024-38277 GHSA-r82w-3phg-qvr4
Affected version: <4.1.11|>=4.2.0-beta,<4.2.8|>=4.3.0-beta,<4.3.5|>=4.4.0-beta,<4.4.1
Reported by:
GitHub -
[HIGH] Moodle Authenticated LFI risk in some misconfigured shared hosting environments
PKSA-kkys-npvt-jjkp CVE-2024-34002 GHSA-mm9p-xwfm-3fqf
Affected version: <4.1.10|>=4.2.0,<4.2.7|>=4.3.0,<4.3.4
Reported by:
GitHub -
[MEDIUM] Moodle Authenticated LFI risk in some misconfigured shared hosting environments
PKSA-yhpg-hcpg-vd71 CVE-2024-34003 GHSA-jg4f-8w9x-jv35
Affected version: <4.1.10|>=4.2.0,<4.2.7|>=4.3.0,<4.3.4
Reported by:
GitHub -
[MEDIUM] Moodle Authenticated LFI risk in some misconfigured shared hosting environments
PKSA-ypnv-pv4y-khkt CVE-2024-34004 GHSA-q3cm-ccrm-2mr6
Affected version: <4.1.10|>=4.2.0,<4.2.7|>=4.3.0,<4.3.4
Reported by:
GitHub -
[HIGH] Moodle Authenticated LFI risk in some misconfigured shared hosting environments
PKSA-7g9b-96vb-f88b CVE-2024-34005 GHSA-r99q-hmqv-xw8w
Affected version: <4.1.10|>=4.2.0,<4.2.7|>=4.3.0,<4.3.4
Reported by:
GitHub -
[MEDIUM] Moodle Unsanitized HTML in site log for config_log_created
PKSA-81r7-dyqg-4q32 CVE-2024-34006 GHSA-vvh5-7v3m-j3mj
Affected version: <4.1.10|>=4.2.0,<4.2.7|>=4.3.0,<4.3.4
Reported by:
GitHub -
[MEDIUM] Moodle Logout CSRF in admin/tool/mfa/auth.php
PKSA-3rcy-dp4y-2rpf CVE-2024-34007 GHSA-8g5h-gjwq-w5ch
Affected version: >=4.3.0,<4.3.4
Reported by:
GitHub -
[HIGH] Moodle CSRF risk in analytics management of models
PKSA-1bk8-gsry-b156 CVE-2024-34008 GHSA-68x5-4jg5-gjgg
Affected version: <4.1.10|>=4.2.0,<4.2.7|>=4.3.0,<4.3.4
Reported by:
GitHub -
[HIGH] Moodle ReCAPTCHA can be bypassed on the login page
PKSA-xhyg-9fqd-4mpd CVE-2024-34009 GHSA-gwf6-q6c2-94p3
Affected version: >=4.3.0,<4.3.4
Reported by:
GitHub -
[HIGH] Moodle CSRF risk in admin preset tool management of presets
PKSA-smf8-81d7-1g8y CVE-2024-34001 GHSA-gq9f-8rj4-w7jc
Affected version: <4.1.10|>=4.2.0,<4.2.7|>=4.3.0,<4.3.4
Reported by:
GitHub -
[HIGH] Moodle Improper Input Validation
PKSA-ybj5-9d11-fk8g CVE-2024-33999 GHSA-r2wx-46gp-rp3h
Affected version: >=4.3.0,<4.3.4
Reported by:
GitHub -
[MEDIUM] Moodle Cross-site Scripting (XSS)
PKSA-44sz-9c8d-byh6 CVE-2024-34000 GHSA-8qwh-4vwv-7c5m
Affected version: <4.1.10|>=4.2.0,<4.2.7|>=4.3.0,<4.3.4
Reported by:
GitHub -
[MEDIUM] Moodle broken access control when setting calendar event type
PKSA-xxjw-syx2-dc4w CVE-2024-33996 GHSA-4qww-rxq6-x7gf
Affected version: <4.1.10|>=4.2.0,<4.2.7|>=4.3.0,<4.3.4
Reported by:
GitHub -
[MEDIUM] Moodle stored Cross-site Scripting (XSS)
PKSA-psg4-6cnq-2vpv CVE-2024-33997 GHSA-9qgq-93c7-9hm4
Affected version: <4.1.10|>=4.2.0,<4.2.7|>=4.3.0,<4.3.4
Reported by:
GitHub -
[MEDIUM] Moodle Cross-site Scripting (XSS)
PKSA-1vcw-7pbp-4hc4 CVE-2024-33998 GHSA-xqhh-253w-4q5f
Affected version: <4.1.10|>=4.2.0,<4.2.7|>=4.3.0,<4.3.4
Reported by:
GitHub -
[MEDIUM] Cross-site Scripting in Moodle Chat
PKSA-dkf4-gr8b-q7z7 CVE-2024-28593 GHSA-f6mh-79vh-2hv7
Affected version: <=4.3.3
Reported by:
GitHub -
[HIGH] Uncontrolled Resource Consumption in moodle
PKSA-cnq3-npb7-81gr CVE-2024-25978 GHSA-487g-3m3v-hjhq
Affected version: <4.1.9|>=4.2.0,<4.2.6|>=4.3.0,<4.3.3
Reported by:
GitHub -
[MEDIUM] Improper Handling of Parameters in moodle
PKSA-8zq5-86tq-npgn CVE-2024-25979 GHSA-6vjf-48fh-vxxj
Affected version: <4.1.9|>=4.2.0,<4.2.6|>=4.3.0,<4.3.3
Reported by:
GitHub -
[MEDIUM] Improper Access Control in moodle
PKSA-q882-vvk2-55y5 CVE-2024-25980 GHSA-cp8m-h777-g4p3
Affected version: <4.1.9|>=4.2.0,<4.2.6|>=4.3.0,<4.3.3
Reported by:
GitHub -
[MEDIUM] Improper Access Control in moodle
PKSA-1rtr-36p9-m5t2 CVE-2024-25981 GHSA-jfrg-9hpq-9hvp
Affected version: <4.1.9|>=4.2.0,<4.2.6|>=4.3.0,<4.3.3
Reported by:
GitHub -
[HIGH] Cross-Site Request Forgery in moodle
PKSA-ywdp-r6kr-8xch CVE-2024-25982 GHSA-7pjp-fm93-p6pj
Affected version: <4.1.9|>=4.2.0,<4.2.6|>=4.3.0,<4.3.3
Reported by:
GitHub -
[MEDIUM] Authorization Bypass in moodle
PKSA-yn3d-by8g-nzfj CVE-2024-25983 GHSA-9r26-5w88-qhp9
Affected version: <4.1.9|>=4.2.0,<4.2.6|>=4.3.0,<4.3.3
Reported by:
GitHub