Filter
AND

DiscourseDiscourse is an open-source discussion platform. Prior to version 3.0.1 on the `stable` branch and v…

8.6
First published (updated )

DiscourseSSRF

8.1
First published (updated )

DiscourseDiscourse vulnerable to ossible DDoS due to unbounded limits in various controller actions

7.5
First published (updated )

DiscourseSSRF

7.5
First published (updated )

DiscourseCSP nonce reuse vulnerability in Discourse

First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

DiscourseDiscourse CSP nonce reuse vulnerability for anonymous users

First published (updated )

DiscourseDiscourse DoS via SvgSprite cache

First published (updated )

DiscourseDiscourse DoS via 2FA and Security Key Names

First published (updated )

DiscourseDiscourse DoS via remote theme assets

First published (updated )

DiscourseDiscourse vulnerable to DoS via drafts

First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

DiscourseDiscourse vulnerable to DoS via defer queue

EPSS
0.04%
First published (updated )

DiscourseDiscourse is an open source platform for community discussion. Versions prior to 3.0.1 (stable), 3.1…

First published (updated )

DiscourseRegular expression denial of service via installing themes via git in discourse

First published (updated )

DiscourseHTML injection via topic embedding in Discourse

First published (updated )

DiscourseDiscourse vulnerable to Cross-site Scripting - user name displayed on post

First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

DiscourseStored Cross-site Scripting via improper sanitization of svg files in Discourse

First published (updated )

DiscourseDiscourse Topic Creation Page Allows iFrame Tag without Restrictions

First published (updated )

DiscourseInfoleak

First published (updated )

DiscourseInfoleak

First published (updated )

DiscourseDiscourse is an open source discussion platform. The embeddable comments can be exploited to create …

First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

DiscourseDiscourse tags with no visibility are leaking into og:article:tag

First published (updated )

DiscourseDiscourse vulnerable to exposure of number of topics recently created in private categories

First published (updated )

DiscourseDiscourse's general category permissions could be set back to default

First published (updated )

DiscourseDiscourse's canonical url not being used for topic embeddings

First published (updated )

DiscourseDiscourse is an open-source discussion platform. Prior to version 3.0.2 of the `stable` branch and v…

First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

DiscourseMultisite denial of service through unsanitized dynamic dispatch to SiteSetting in Discourse

First published (updated )

DiscourseTopic Title Validation Skipped When Changing Category in Discourse

First published (updated )

DiscourseDiscourse's restricted tag information visible to unauthenticated users

First published (updated )

DiscourseDiscourse vulnerable to DoS via post edit reason

EPSS
0.04%
First published (updated )

DiscourseDiscourse is an open-source discussion platform. Prior to version 3.0.1 on the `stable` branch and 3…

First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2025 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203