CVE-2026-111369 is a high-severity vulnerability in ClassroomIO through 1.0.0, allowing authenticated students to modify or delete lessons across courses and organizations due to incorrect authorization in the lesson update and delete routes. Educational institutions and administrators should assess exposure and verify remediation to prevent unauthorized changes to educational content. The vulnerability e [truncated]
ClassroomIO through 1.0.0 contains an insecure direct object reference vulnerability in the Hono API course submission routes that allows course tutors or admins to modify submissions in other courses. This could lead to unauthorized access or data tampering. The vulnerability exists due to insufficient validation of user input in the course submission routes. Defenders should assess their exposure and pr [truncated]
