Filter
AND
AND

DiscourseDiscourse vulnerable to Cross-site Scripting through tag descriptions

First published (updated )

DiscourseDiscourse vulnerable to exposure of user post counts per topic to unauthorized users

First published (updated )

DiscourseTopic Title Validation Skipped When Changing Category in Discourse

First published (updated )

DiscourseCSP nonce reuse vulnerability in Discourse

First published (updated )

DiscourseDiscourse CSP nonce reuse vulnerability for anonymous users

First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

DiscourseDiscourse vulnerable to DoS via post edit reason

EPSS
0.04%
First published (updated )

DiscourseDiscourse vulnerable to DoS via defer queue

EPSS
0.04%
First published (updated )

DiscourseDiscourse's restricted tag information visible to unauthenticated users

First published (updated )

DiscourseDiscourse DoS via 2FA and Security Key Names

First published (updated )

DiscourseDiscourse DoS via remote theme assets

First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

DiscourseDiscourse DoS via SvgSprite cache

First published (updated )

DiscourseDiscourse before 2.3.0 and 2.4.x before 2.4.0.beta3 lacks a confirmation screen when logging in via …

First published (updated )

DiscoursePresence of restricted personal Discourse messages may be leaked if tagged with a tag

First published (updated )

DiscourseInfoleak

First published (updated )

DiscourseInfoleak

First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

DiscourseDiscourse is an open source discussion platform. The embeddable comments can be exploited to create …

First published (updated )

DiscourseInfoleak

First published (updated )

DiscourseDiscourse is an open-source discussion platform. Prior to version 3.0.1 on the `stable` branch and 3…

First published (updated )

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2025 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203