Moodle 4.1.21

Unsupported Moodle Version

This version of Moodle is no longer supported and will not receive fixes for security risks.
You are encouraged to upgrade to a supported version of Moodle.

Release date: 6 October 2025

Here is the full list of fixed issues in 4.1.21.

General fixes and improvements

• MDL-86495 - Improve error handling for geoPlugin API now the service is no longer available for free use

Security fixes

• MSA-25-0042 - Upgrade FPDI including security fix (upstream)
• MSA-25-0044 - External cohort search service method leaks system cohort data
• MSA-25-0048 - Password brute force risk when mobile/web services enabled
• MSA-25-0049 - Names of hidden groups are visible to users with access to create group calendar events
• MSA-25-0050 - Possible to bypass timer in timed assignments