LOW 3.3

PYSEC-2025-219

Details

An issue was discovered in Overhang.IO (tutor-open-edx) (overhangio/tutor) 20.0.2 allowing local unauthorized attackers to gain access to sensitive information due to the absence of proper cache-control HTTP headers and client-side session checks.

Are you affected?

Enter the version of the package you're using.

Affected packages

PyPI / tutor

Introduced in: 0

No fixed version published yet for tutor (pip). Pin to a known-safe version or switch to an alternative.

References

https://docs.tutor.edly.io [WEB]
https://github.com/Rivek619/CVE-2025-65681 [ADVISORY]
https://github.com/overhangio/tutor [PACKAGE]