Filter
AND

Versions

2.9.0-beta1
33
2.9.0-beta2
33
2.9.0-beta3
33
2.9.0-beta4
30
2.9.0-beta5
29
2.9.0-beta7
29
2.9.0-beta6
28
2.9.0-beta8
28
2.8.0-beta1
27
2.8.0-beta2
27
2.8.0-beta3
27
2.8.0-beta4
27
3.1.0-beta1
27
2.8.0-beta5
25
2.8.0-beta6
25
2.9.0-beta10
25
2.8.0-beta7
24
2.9.0-beta11
24
2.9.0-beta12
24
2.9.0-beta13
22
2.9.0-beta9
22
2.8.0-beta8
21
2.8.0-beta9
21
2.9.0-beta14
21
2.8.0-beta10
20
3.1.0-beta2
20
3.0.0-beta15
19
2.4.0-beta1
18
2.4.0-beta2
18
1.1.0-beta1
17
1.1.0-beta2
17
1.1.0-beta3
17
1.1.0-beta4
17
1.1.0-beta5
17
1.1.0-beta6
17
1.1.0-beta6b
17
1.1.0-beta7
17
1.1.0-beta8
17
1.2.0-beta1
17
1.2.0-beta2
17
1.2.0-beta3
17
1.2.0-beta4
17
1.2.0-beta5
17
1.2.0-beta6
17
1.2.0-beta7
17
1.2.0-beta8
17
1.2.0-beta9
17
1.3.0-beta1
17
1.3.0-beta10
17
1.3.0-beta11
17
1.3.0-beta2
17
1.3.0-beta3
17
1.3.0-beta4
17
1.3.0-beta5
17
1.3.0-beta6
17
1.3.0-beta7
17
1.3.0-beta8
17
1.3.0-beta9
17
1.4.0-beta1
17
1.4.0-beta10
17
1.4.0-beta11
17
1.4.0-beta12
17
1.4.0-beta2
17
1.4.0-beta3
17
1.4.0-beta4
17
1.4.0-beta5
17
1.4.0-beta6
17
1.4.0-beta7
17
1.4.0-beta8
17
1.4.0-beta9
17
1.5.0-beta1
17
1.5.0-beta10
17
1.5.0-beta11
17
1.5.0-beta12
17
1.5.0-beta13
17
1.5.0-beta13b
17
1.5.0-beta14
17
1.5.0-beta2
17
1.5.0-beta3
17
1.5.0-beta4
17
1.5.0-beta5
17
1.5.0-beta6
17
1.5.0-beta7
17
1.5.0-beta8
17
1.5.0-beta9
17
1.6.0-beta1
17
1.6.0-beta10
17
1.6.0-beta11
17
1.6.0-beta12
17
1.6.0-beta2
17
1.6.0-beta3
17
1.6.0-beta4
17
1.6.0-beta5
17
1.6.0-beta6
17
1.6.0-beta7
17
1.6.0-beta8
17
1.6.0-beta9
17
1.7.0-beta1
17
1.7.0-beta10
17
1.7.0-beta11
17
1.7.0-beta2
17
1.7.0-beta3
17
1.7.0-beta4
17
1.7.0-beta5
17
1.7.0-beta6
17
1.7.0-beta7
17
1.7.0-beta8
17
1.7.0-beta9
17
1.8.0-beta1
17
1.8.0-beta10
17
1.8.0-beta11
17
1.8.0-beta12
17
1.8.0-beta13
17
1.8.0-beta2
17
1.8.0-beta3
17
1.8.0-beta4
17
1.8.0-beta5
17
1.8.0-beta6
17
1.8.0-beta7
17
1.8.0-beta8
17
1.8.0-beta9
17
1.9.0-beta1
17
1.9.0-beta10
17
1.9.0-beta11
17
1.9.0-beta12
17
1.9.0-beta13
17
1.9.0-beta14
17
1.9.0-beta15
17
1.9.0-beta16
17
1.9.0-beta17
17
1.9.0-beta2
17
1.9.0-beta3
17
1.9.0-beta4
17
1.9.0-beta5
17
1.9.0-beta6
17
1.9.0-beta7
17
1.9.0-beta8
17
1.9.0-beta9
17
2.0.0-beta1
17
2.0.0-beta10
17
2.0.0-beta2
17
2.0.0-beta3
17
2.0.0-beta4
17
2.0.0-beta5
17
2.0.0-beta6
17
2.0.0-beta7
17
2.0.0-beta8
17
2.0.0-beta9
17
2.1.0-beta1
17
2.1.0-beta2
17
2.1.0-beta3
17
2.1.0-beta4
17
2.1.0-beta5
17
2.1.0-beta6
17
2.2.0-beta1
17
2.2.0-beta10
17
2.2.0-beta2
17
2.2.0-beta3
17
2.2.0-beta4
17
2.2.0-beta5
17
2.2.0-beta6
17
2.2.0-beta7
17
2.2.0-beta8
17
2.2.0-beta9
17
2.3.0-beta1
17
2.3.0-beta10
17
2.3.0-beta11
17
2.3.0-beta2
17
2.3.0-beta3
17
2.3.0-beta4
17
2.3.0-beta5
17
2.3.0-beta6
17
2.3.0-beta7
17
2.3.0-beta8
17
2.3.0-beta9
17
2.4.0-beta10
17
2.4.0-beta11
17
2.4.0-beta3
17
2.4.0-beta4
17
2.4.0-beta5
17
2.4.0-beta6
17
2.4.0-beta7
17
2.4.0-beta8
17
2.4.0-beta9
17
2.5.0-beta1
17
2.5.0-beta2
17
2.5.0-beta3
17
2.5.0-beta4
17
2.5.0-beta5
17
2.5.0-beta6
17
2.5.0-beta7
17
2.6.0-beta1
17
2.6.0-beta2
17
2.6.0-beta3
17
2.6.0-beta4
17
2.6.0-beta5
17
2.6.0-beta6
17
2.7.0-beta1
17
2.7.0-beta2
17
2.7.0-beta3
17
2.7.0-beta4
17
2.7.0-beta5
17
2.7.0-beta6
17
2.7.0-beta7
17
2.7.0-beta8
17
2.7.0-beta9
17
2.8.0-beta11
17
3.0.0-beta16
15
3.1.0-beta3
14
3.1.0-beta5
10
3.1.0-beta6
8
3.2.0-beta1
8
3.2.0-beta2
6
3.3.0-beta1
6
3.3.0-beta2
6
3.1.0-beta4
4
3.1.0-beta7
4
3.1.0-beta8
4
3.2.0-beta3
3
3.3.0-beta3
3
2.3.2
2
3.0.0
2
3.0.1
2
3.1.1
2
3.4.0
2
3.4.0-beta1
2
2.6.0
1
2.7.12
1
2.7.7
1
2.7.9
1
2.8.11
1
2.8.13
1
2.8.2
1
2.8.4
1
3.0.2
1
3.1.0
1
3.2.0-beta4
1
3.3.0-beta4
1

DiscourseMultisite denial of service through unsanitized dynamic dispatch to SiteSetting in Discourse

First published (updated )

DiscourseStored Cross-site Scripting via improper sanitization of svg files in Discourse

First published (updated )

DiscourseHTML injection via topic embedding in Discourse

First published (updated )

DiscourseCross-site Scripting (XSS) via topic titles when CSP disabled in Discourse

First published (updated )

DiscoursePartial denial of service via inline oneboxes in Discourse

First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

DiscoursePotential bypass of chat permissions in Discourse

First published (updated )

DiscourseStored DOM-based XSS (without CSP) via video placeholders in Discourse

First published (updated )

DiscourseHTMLi(XSS without CSP) via Onebox urls in Discourse

First published (updated )

DiscourseDiscourse vulnerable to exposure of number of topics recently created in private categories

First published (updated )

DiscourseDiscourse's canonical url not being used for topic embeddings

First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

DiscourseDiscourse Topic Creation Page Allows iFrame Tag without Restrictions

First published (updated )

DiscourseDiscourse's general category permissions could be set back to default

First published (updated )

DiscourseMagnific lightbox susceptible to Cross-site Scripting in Discourse

First published (updated )

DiscourseBypass of Discourse Connect using other login paths if enabled in Discourse

First published (updated )

DiscourseHTML injection in oneboxed links

First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

DiscourseBypassing height value allowed in some theme components

First published (updated )

DiscourseDiscourse vulnerable to DoS via Regexp Injection in Full Name

First published (updated )

DiscourseDiscourse vulnerable to Cross-site Scripting through tag descriptions

First published (updated )

DiscourseDiscourse vulnerable to exposure of user post counts per topic to unauthorized users

First published (updated )

DiscourseAny authenticated Discourse user can create an unlisted topic

First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

DiscourseDiscourse may allow exposure of hidden tags in the subject of notification emails

First published (updated )

DiscourseExposure of whisper participants in discourse

First published (updated )

DiscourseDenial of Service in discourse

First published (updated )

DiscourseBypass of Poll voting limits in Discourse

First published (updated )

DiscourseAnonymous user cache poisoning via development-mode header in Discourse

First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

DiscourseNotifications leak in Discourse

First published (updated )

DiscourseCache poisoning via maliciously-formed request in discourse

First published (updated )

DiscourseTopic Title Validation Skipped When Changing Category in Discourse

First published (updated )

DiscourseCSP nonce reuse vulnerability in Discourse

First published (updated )

DiscoursePrevent topic list filtering by hidden tags for unauthorized users in Discourse

First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2025 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203