Moodle Improper Control of Generation of Code (Code Injection) Vulnerability - CVE-2023-28333
The Mustache pix helper contained a potential Mustache injection risk if combined with user input (note: This did not appear to be implemented/exploitable anywhere in the core Moodle LMS).