Discourse discourse-ai

• CVE-2024-54142 Critical 9.1 Cross-site Scripting via Discourse-ai SharedAiConversation onebox in Discourse 0.4%
• CVE-2024-23654 Medium 4.1 discourse-ai admin-initiated SSRF when interacting with AI services 0.4%