MSA-22-0021: Upgrade Mustache to latest version (upstream)

MSA-22-0021: Upgrade Mustache to latest version (upstream)

by Michael Hawkins -
Number of replies: 0

The Mustache template library included with Moodle has been upgraded to the latest version, which includes a fix for a serious security issue.


Severity/Risk: Serious
Versions affected: 4.0 to 4.0.2, 3.11 to 3.11.8, 3.9 to 3.9.15 and earlier unsupported versions
Versions fixed: 4.0.3, 3.11.9 and 3.9.16
Reported by: Lars Bonczek
CVE identifier: CVE-2022-0323
Changes (master): http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-75388
Tracker issue: MDL-75388 Upgrade Mustache to latest version (upstream)