Filter

Versions

2.9.0-beta1
47
2.9.0-beta2
47
2.9.0-beta3
47
2.9.0-beta4
44
2.9.0-beta5
43
2.9.0-beta7
43
2.9.0-beta6
42
2.9.0-beta8
41
2.8.0-beta1
37
2.8.0-beta2
37
2.8.0-beta3
37
2.9.0-beta10
36
2.8.0-beta4
35
2.8.0-beta5
33
2.8.0-beta6
33
2.9.0-beta11
33
2.9.0-beta9
33
3.1.0-beta1
33
2.9.0-beta12
32
2.8.0-beta7
31
2.9.0-beta13
30
2.9.0-beta14
29
2.8.0-beta8
28
2.8.0-beta9
28
2.8.0-beta10
27
3.0.0-beta15
27
2.4.0-beta1
25
2.4.0-beta2
25
3.1.0-beta2
25
2.7.0-beta1
24
1.1.0-beta1
23
1.1.0-beta2
23
1.1.0-beta3
23
1.1.0-beta4
23
1.1.0-beta5
23
1.1.0-beta6
23
1.1.0-beta6b
23
1.1.0-beta7
23
1.1.0-beta8
23
1.2.0-beta1
23
1.2.0-beta2
23
1.2.0-beta3
23
1.2.0-beta4
23
1.2.0-beta5
23
1.2.0-beta6
23
1.2.0-beta7
23
1.2.0-beta8
23
1.2.0-beta9
23
1.3.0-beta1
23
1.3.0-beta10
23
1.3.0-beta11
23
1.3.0-beta2
23
1.3.0-beta3
23
1.3.0-beta4
23
1.3.0-beta5
23
1.3.0-beta6
23
1.3.0-beta7
23
1.3.0-beta8
23
1.3.0-beta9
23
1.4.0-beta1
23
1.4.0-beta10
23
1.4.0-beta11
23
1.4.0-beta12
23
1.4.0-beta2
23
1.4.0-beta3
23
1.4.0-beta4
23
1.4.0-beta5
23
1.4.0-beta6
23
1.4.0-beta7
23
1.4.0-beta8
23
1.4.0-beta9
23
1.5.0-beta1
23
1.5.0-beta10
23
1.5.0-beta11
23
1.5.0-beta12
23
1.5.0-beta13
23
1.5.0-beta13b
23
1.5.0-beta14
23
1.5.0-beta2
23
1.5.0-beta3
23
1.5.0-beta4
23
1.5.0-beta5
23
1.5.0-beta6
23
1.5.0-beta7
23
1.5.0-beta8
23
1.5.0-beta9
23
1.6.0-beta1
23
1.6.0-beta10
23
1.6.0-beta11
23
1.6.0-beta12
23
1.6.0-beta2
23
1.6.0-beta3
23
1.6.0-beta4
23
1.6.0-beta5
23
1.6.0-beta6
23
1.6.0-beta7
23
1.6.0-beta8
23
1.6.0-beta9
23
1.7.0-beta1
23
1.7.0-beta10
23
1.7.0-beta11
23
1.7.0-beta2
23
1.7.0-beta3
23
1.7.0-beta4
23
1.7.0-beta5
23
1.7.0-beta6
23
1.7.0-beta7
23
1.7.0-beta8
23
1.7.0-beta9
23
1.8.0-beta1
23
1.8.0-beta10
23
1.8.0-beta11
23
1.8.0-beta12
23
1.8.0-beta13
23
1.8.0-beta2
23
1.8.0-beta3
23
1.8.0-beta4
23
1.8.0-beta5
23
1.8.0-beta6
23
1.8.0-beta7
23
1.8.0-beta8
23
1.8.0-beta9
23
1.9.0-beta1
23
1.9.0-beta10
23
1.9.0-beta11
23
1.9.0-beta12
23
1.9.0-beta13
23
1.9.0-beta14
23
1.9.0-beta15
23
1.9.0-beta16
23
1.9.0-beta17
23
1.9.0-beta2
23
1.9.0-beta3
23
1.9.0-beta4
23
1.9.0-beta5
23
1.9.0-beta6
23
1.9.0-beta7
23
1.9.0-beta8
23
1.9.0-beta9
23
2.0.0-beta1
23
2.0.0-beta10
23
2.0.0-beta2
23
2.0.0-beta3
23
2.0.0-beta4
23
2.0.0-beta5
23
2.0.0-beta6
23
2.0.0-beta7
23
2.0.0-beta8
23
2.0.0-beta9
23
2.1.0-beta1
23
2.1.0-beta2
23
2.1.0-beta3
23
2.1.0-beta4
23
2.1.0-beta5
23
2.1.0-beta6
23
2.2.0-beta1
23
2.2.0-beta10
23
2.2.0-beta2
23
2.2.0-beta3
23
2.2.0-beta4
23
2.2.0-beta5
23
2.2.0-beta6
23
2.2.0-beta7
23
2.2.0-beta8
23
2.2.0-beta9
23
2.3.0-beta1
23
2.3.0-beta10
23
2.3.0-beta11
23
2.3.0-beta2
23
2.3.0-beta3
23
2.3.0-beta4
23
2.3.0-beta5
23
2.3.0-beta6
23
2.3.0-beta7
23
2.3.0-beta8
23
2.3.0-beta9
23
2.4.0-beta10
23
2.4.0-beta11
23
2.4.0-beta3
23
2.4.0-beta4
23
2.4.0-beta5
23
2.4.0-beta6
23
2.4.0-beta7
23
2.4.0-beta8
23
2.4.0-beta9
23
2.5.0-beta1
23
2.5.0-beta2
23
2.5.0-beta3
23
2.5.0-beta4
23
2.5.0-beta5
23
2.5.0-beta6
23
2.5.0-beta7
23
2.6.0-beta1
23
2.6.0-beta2
23
2.6.0-beta3
23
2.6.0-beta4
23
2.6.0-beta5
23
2.6.0-beta6
23
2.7.0-beta2
23
2.7.0-beta3
23
2.7.0-beta4
23
2.7.0-beta5
23
2.7.0-beta6
23
2.7.0-beta7
23
2.7.0-beta8
23
2.7.0-beta9
23
2.8.0-beta11
23
3.0.0-beta16
19
3.1.0-beta3
17
3.2.0-beta1
16
3.1.0-beta5
13
3.1.0-beta6
11
3.2.0-beta2
10
3.3.0-beta1
7
3.3.0-beta2
7
3.1.1
6
3.1.0-beta7
5
3.1.0-beta8
5
3.1.0-beta4
4
3.2.0-beta3
4
3.3.0-beta3
4
3.4.0
4
3.1.0
3
3.4.0-beta1
3
2.3.2
2
2.6.0
2
3.0.0
2
3.0.1
2
3.3.0-beta4
2
2.7.12
1
2.7.5
1
2.7.7
1
2.7.9
1
2.8.10
1
2.8.11
1
2.8.13
1
2.8.2
1
2.8.4
1
2.8.6
1
2.8.7
1
3.0.2
1
3.2.0-beta4
1

DiscourseRCE via malicious SNS subscription payload

First published (updated )

DiscourseDiscourse SSRF vulnerability in Embedding

First published (updated )

DiscourseCross-site Scripting via Discourse-ai SharedAiConversation onebox in Discourse

First published (updated )

DiscourseDiscourse vulnerable to RCE via admins uploading maliciously zipped file

First published (updated )

DiscourseDiscourse user account takeover via email and invite link

8.9
First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

DiscourseUser can bypass approval when invited to Discourse

8.8
First published (updated )

DiscourseDiscourse vulnerable to Cross-site Scripting in local oneboxes

8.8
First published (updated )

DiscourseDiscourse vulnerable to unlimited mentioned users in message serializer

8.6
First published (updated )

DiscourseDiscourse is an open-source discussion platform. Prior to version 3.0.1 on the `stable` branch and v…

8.6
First published (updated )

DiscourseBypass of email address validation via encoded email addresses in Discourse

8.2
First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

DiscourseAnonymous cache poisoning via XHR requests in Discourse

8.2
First published (updated )

DiscourseAnonymous cache poisoning via XHR requests in Discourse

8.2
First published (updated )

DiscourseDiscourse is an open source platform for community discussion. In affected versions an attacker can …

8.2
EPSS
0.04%
First published (updated )

DiscourseYouTube Onebox susceptible to XSS

8.1
First published (updated )

DiscourseDiscourse password reset link can lead to in account takeover if user changes to a new email

8.1
First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

DiscourseSSRF

8.1
First published (updated )

DiscourseCross-site Scripting via email preview when CSP disabled in Discourse

First published (updated )

DiscourseDiscourse vulnerable to Cross-site Scripting through pending post titles descriptions

First published (updated )

DiscoursePossible Server-Side Request Forgery (SSRF) in webhooks

7.6
First published (updated )

DiscourseDiscourse vulnerable to DoS through Onebox

7.5
First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

DiscourseDiscourse vulnerable to DoS via Tag Group

7.5
First published (updated )

DiscourseDenial of service by the absence of restrictions on replies to posts in Discourse

7.5
First published (updated )

DiscoursePotential Backup file leaked via Nginx in Discourse

7.5
First published (updated )

DiscourseUnauthenticated access to new private chat messages in Discourse

7.5
First published (updated )

DiscourseMalicious requests can fill up the log files resulting in a deinal of service in Discourse

7.5
First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

DiscoursePrivate message title and participating users leaked in discourse

7.5
First published (updated )

DiscourseIn Discourse 2.7.0 through beta1, a rate-limit bypass leads to a bypass of the 2FA requirement for c…

7.5
First published (updated )

DiscourseRe-use of email tokens in Discourse

7.5
First published (updated )

DiscourseDenial of service via User Custom Sidebar Section Unlimited Link Creation in discourse

7.5
First published (updated )

DiscourseDiscourse before 2.3.0 and 2.4.x before 2.4.0.beta3 lacks a confirmation screen when logging in via …

7.5
First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2025 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203