CAMP-2026-0007

Defective release, withdrawn (not a security issue)

Componentformat_grid
SeverityLOW
Affected versions=500.1.1
Fixed in500.1.2
Published2026-09-27T13:11:05Z
Revocationaffected versions are removed from installation channels; archived artifacts are preserved

Details

Not a vulnerability. The maintainer reports that the 500.1.1 release shipped files that had been removed from the plugin and that break its Behat tests (camp-index#392). The release record itself is intact: the archived ZIP matches the recorded hash and the tag. The version is withdrawn from installation channels at the maintainer's request; 500.1.2, which removes those files (amd/src/local/content/actions.js and its build output, classes/output/courseformat/state/course.php) and is otherwise a version bump, supersedes it. Sites on 500.1.1 should upgrade to 500.1.2.