The Mustache pix helper contained a potential Mustache injection risk if combined with user input (note: This did not appear to be implemented/exploitable anywhere in the core Moodle LMS).Referenceshttps://bugzilla.redhat.com/show_bug.cgi?id=2179422https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3QZN34VSF4HTCW3C3ZP2OZYSLYUKADPF/https://moodle.org/mod/forum/discuss.php?d=445065
