H5P metadata automatically populated the author with the user's username, which could be sensitive information.
{ "cpes": [ "cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*" ], "severity": "Low" }