discourse

10 known vulnerabilities in discourse, with patch priority, exploit likelihood and the news covering them.

Latest vulnerabilities

  • CVE-2026-91121 CVSS 5.0 medium Discourse is an open-source discussion platform. Prior to 2026.1.8, 2026.6.3, 2026.7.2, and 2026.8.0, attacker-controlled upload filenames…
  • CVE-2026-91120 CVSS 5.4 medium Discourse is an open-source discussion platform. Prior to 2026.1.8, 2026.6.3, 2026.7.2, and 2026.8.0, provider-controlled video titles in…
  • CVE-2026-91119 CVSS 6.4 medium Discourse is an open-source discussion platform. Prior to 2026.1.8, 2026.6.3, 2026.7.2, and 2026.8.0, the topic small-action and…
  • CVE-2026-91134 CVSS 5.4 medium Discourse is an open-source discussion platform. Prior to 2026.1.8, 2026.6.3, 2026.7.2, and 2026.8.0, the Discourse post sanitizer allowed…
  • CVE-2026-91133 CVSS 6.5 medium Discourse is an open-source discussion platform. Prior to 2026.1.8, 2026.6.3, 2026.7.2, and 2026.8.0, authenticated users could supply…
  • CVE-2026-91132 CVSS 4.3 medium Discourse is an open-source discussion platform. Prior to 2026.1.8, 2026.6.3, 2026.7.2, and 2026.8.0, sites using wildcard patterns in the…
  • CVE-2026-91123 CVSS 7.2 high Discourse is an open-source discussion platform. Prior to 2026.1.8, 2026.6.3, 2026.7.2, and 2026.8.0, the iframe src traversal guard did…
  • CVE-2026-91122 CVSS 8.7 high Discourse is an open-source discussion platform. Prior to 2026.1.8, 2026.6.3, 2026.7.2, and 2026.8.0, the video placeholder component…
  • CVE-2026-84302 CVSS 4.2 medium Discourse is an open-source discussion platform. Prior to 2026.1.6, 2026.5.2, 2026.6.1, and 2026.7.0, Discourse AI reviewables associated…
  • CVE-2026-59830 CVSS 5.4 medium Discourse is an open-source discussion platform. Prior to 2026.7.0, the post action component failed to escape user-controlled display…