Discourse discourse

• CVE-2026-91157 High 7.5 Discourse: Media uploads remain publicly accessible after category permissions are restricted 0.5%
• CVE-2026-91156 High 7.5 Discourse: Chat MessageBus delivers read-restricted messages to unauthorized users 0.5%
• CVE-2026-91159 High 7.7 Discourse: Stored oEmbed HTML injection via allowed iframe 0.4%
• CVE-2026-91119 Medium 6.4 Discourse: Encode action_code_who in mention URLs 0.2%
• CVE-2026-91121 Medium 5.0 Discourse: Chat upload filenames rendered as raw HTML in excerpts 0.3%
• CVE-2026-91120 Medium 5.4 Discourse: Stored HTML injection in video notification emails 0.2%
• CVE-2026-91132 Medium 4.3 Discourse: Wildcard iframe origin allowlist bypass via authority separators 0.1%
• CVE-2026-91122 High 8.7 Discourse: Chat MessageBus delivers read-restricted messages to unauthorized users 0.3%
• CVE-2026-91123 High 7.2 Discourse: Reject literal backslash path separators in iframe src traversal guard 0.3%
• CVE-2026-91133 Medium 6.5 Discourse: Escape LIKE metacharacters in upload paths to prevent disclosure 0.3%
• CVE-2026-91134 Medium 5.4 Discourse: Block post iframes whose encoded userinfo bypasses the allowed_iframes allowlist 0.2%
• CVE-2026-84302 Medium 4.2 Discourse: Non-participant moderators can read, edit, and delete PM content through Discourse AI reviewables 0.2%
• CVE-2026-59830 Medium 5.4 Discourse: Stored XSS via unescaped actor name in post actions 0.3%
• CVE-2026-53960 Medium 5.3 Discourse: Hidden first-post excerpt is emitted in Q&A schema JSON-LD 0.3%
• CVE-2026-55704 Medium 4.3 Discourse: Shared-draft titles and excerpts leak through group post serialization 0.3%
• CVE-2026-55674 Critical 9.3 Discourse: Cache poisoning/XSS via color scheme cookies 0.6%
• CVE-2026-59829 Medium 4.3 Discourse: Review queue exposes flag-related private message excerpts to category group moderators 0.4%
• CVE-2026-72732 Medium 4.3 Discourse: Templates endpoint exposes hidden tag names 0.3%
• CVE-2026-72731 High 7.1 Discourse: Strip SQL comments and use non-recursive parameter interpolation in Data Explorer 0.4%
• CVE-2026-72730 High 8.7 Discourse: Stored XSS chat-transcript username unescaped in Rich Text Editor 0.4%
• CVE-2026-72729 Low 2.0 Discourse: Stored XSS in discourse-local-dates plugin 0.5%
• CVE-2026-72728 Medium 6.3 Discourse: Onebox iframe origin allowlist enforces URL authority boundary 0.3%
• CVE-2026-72727 Medium 4.8 Discourse: Stored XSS in the moderation review queue 0.4%
• CVE-2026-72726 Medium 6.5 Discourse: Unauthorized eavesdropping on private AI bot conversations. 0.5%
• CVE-2026-72725 Medium 5.4 Discourse: Stored XSS in staff action logs injects staff UI 0.3%
• CVE-2026-72724 Medium 4.3 Discourse: Private Chat Threat Message Disclosure via Chat Onebox Channel/Threat ID Mismatch 0.6%
• CVE-2026-72723 Medium 5.3 Discourse: Anonymous sidebar serialization exposes descriptions of category-restricted tags 0.5%
• CVE-2026-72722 Medium 4.3 Discourse: Duplicate lookup reveals restricted topic titles through canonicalized URLs 0.4%
• CVE-2026-72721 Medium 5.3 Discourse: Onebox Domain Blocklist Bypass via Case-Sensitive Comparison 0.6%
• CVE-2026-72720 Medium 6.4 Discourse: HTML injection in PrettyText.format_for_email from cooked-attribute reparsing 0.4%
• CVE-2026-45780 Medium 5.3 Discourse: Private event sample invitees are serialized to non-invited event viewers 0.5%
• CVE-2026-53963 High 7.3 Discourse: Stored-XSS in 2FA delete confirmation modal 0.7%
• CVE-2026-59828 Medium 5.3 Discourse: Hidden post revisions leak through adjacent visible diffs 0.5%
• CVE-2026-44787 High 8.2 Discourse: Signup-time primary_group_id assignment grants whisperer access 0.7%
• CVE-2026-53962 Medium 5.4 Discourse: Insufficient SVG sanitization logic 0.4%
• CVE-2026-55424 High 7.4 Discourse: Topic featured link susceptible to stored XSS 0.4%
• CVE-2026-45788 Medium 6.3 Discourse: Secure uploads exposed by hotlinked image copying 0.6%
• CVE-2026-49256 Medium 6.3 Discourse: Hidden tag names leaked via category serializers 0.5%
• CVE-2026-46413 Medium 6.5 Discourse: Regular users can route multipart uploads into the admin backup store 0.5%
• CVE-2026-53961 Medium 6.5 Discourse: Forged AWS SNS bounce notifications can disable a targeted user's email (missing TopicArn binding) 0.3%
• CVE-2026-55420 High 7.5 Discourse: Remote code execution via pdf uploads 0.6%
• CVE-2026-47264 Medium 5.3 Discourse: Don't leak restricted tag group names via tag info 0.2%
• CVE-2026-47263 Medium 4.3 Discourse: Prevent webhook payload disclosure on event redelivery 0.2%
• CVE-2026-45775 Medium 6.8 Discourse: Cross-site backup access via path traversal in multisite local backups 0.3%
• CVE-2026-45085 Medium 5.3 Discourse: Chat misauthorization and information disclosure 0.2%
• CVE-2026-44785 Medium 4.3 Discourse: Hidden reply-to post raw can be disclosed through AI explain prompts 0.2%
• CVE-2026-44784 Medium 6.5 Discourse: Non-staff group owners can see email password in plaintext through group history 0.2%
• CVE-2026-44783 Medium 5.4 Discourse: Replying to a whisper lets non-whisperers create staff-only whisper posts 0.1%
• CVE-2026-44782 Medium 4.3 Discourse: GroupPostSerializer leaks hidden full names through reaction post association 0.2%
• CVE-2026-44780 Medium 4.3 Discourse: Category queue reviewers can read raw incoming emails from queued posts 0.2%