Vulnerability index

Browse CVEs

207 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Discourse MEDIUM 5.3
CVE-2026-59828

Discourse is an open-source discussion platform. Prior to 2026.6.0, 2026.5.1, 2026.4.2, and 2026.1.5, post revisions that should be hidden from regul…

Fix: 2026.1.5 / 2026.4.2+
Fix from $1,600 2026-07-09
Discourse MEDIUM 5.4
CVE-2026-55424

Discourse is an open-source discussion platform. Prior to 2026.6.0, 2026.5.1, 2026.4.2, and 2026.1.5, a topic "featured link" was not sufficiently no…

Fix: 2026.1.5 / 2026.4.2+
Fix from $1,600 2026-07-09
Discourse CRITICAL 9.0
CVE-2026-53963

Discourse is an open-source discussion platform. Prior to 2026.6.0, 2026.5.1, 2026.4.2, and 2026.1.5, a malicious second factor name on an attacker-c…

Fix: 2026.1.5 / 2026.4.2+
Fix from $2,300 2026-07-09
Discourse HIGH 7.5
CVE-2026-49256

Discourse is an open-source discussion platform. Prior to 2026.6.0, 2026.5.1, 2026.4.2, and 2026.1.5, restricted tag and tag-group names attached to …

Fix: 2026.1.5 / 2026.4.2+
Fix from $1,950 2026-07-09
Discourse MEDIUM 6.5
CVE-2026-46413

Discourse is an open-source discussion platform. Prior to 2026.6.0, 2026.5.1, 2026.4.2, and 2026.1.5, regular users could route direct S3 multipart u…

Fix: 2026.1.5 / 2026.4.2+
Fix from $1,600 2026-07-09
Discourse MEDIUM 6.5
CVE-2026-53961

Discourse is an open-source discussion platform. Prior to 2026.6.0, 2026.5.1, 2026.4.2, and 2026.1.5, the AWS SES bounce webhook at POST /webhooks/aw…

Fix: 2026.1.5 / 2026.4.2+
Fix from $1,600 2026-07-09
Discourse MEDIUM 5.4
CVE-2026-53962

Discourse is an open-source discussion platform. Prior to 2026.6.0, 2026.5.1, 2026.4.2, and 2026.1.5, insufficient SVG sanitization in upload and use…

Fix: 2026.1.5 / 2026.4.2+
Fix from $1,600 2026-07-09
Discourse HIGH 7.5
CVE-2026-45788

Discourse is an open-source discussion platform. Prior to 2026.6.0, 2026.5.1, 2026.4.2, and 2026.1.5, secure uploads could be exposed by pull_hotlink…

Fix: 2026.1.5 / 2026.4.2+
Fix from $1,950 2026-07-09
Discourse HIGH 7.1
CVE-2026-44787

Discourse is an open-source discussion platform. Prior to 2026.6.0, 2026.5.1, 2026.4.2, and 2026.1.5, the signup flow could allow newly registered us…

Fix: 2026.1.5 / 2026.4.2+
Fix from $1,950 2026-07-09
Discourse HIGH 8.1
CVE-2026-55420

Discourse is an open-source discussion platform. Prior to 2026.6.0, 2026.5.1, 2026.4.2, and 2026.1.5, under certain non-default configurations, proce…

Fix: 2026.1.5 / 2026.4.2+
Fix from $1,950 2026-07-09
Discourse MEDIUM 6.8
CVE-2026-45775

Discourse is an open-source discussion platform. From versions 2026.1.0-latest to before 2026.1.4, 2026.3.0-latest to before 2026.3.1, and 2026.4.0-l…

Fix: 2026.1.0 / 2026.1.4+
Fix from $1,600 2026-06-12
Discourse MEDIUM 5.3
CVE-2026-45085

Discourse is an open-source discussion platform. From versions 2026.1.0-latest to before 2026.1.4, 2026.3.0-latest to before 2026.3.1, and 2026.4.0-l…

Fix: 2026.1.0 / 2026.1.4+
Fix from $1,600 2026-06-12
Discourse MEDIUM 5.3
CVE-2026-47264

Discourse is an open-source discussion platform. From versions 2026.1.0-latest to before 2026.1.4, 2026.3.0-latest to before 2026.3.1, and 2026.4.0-l…

Fix: 2026.1.0 / 2026.1.4+
Fix from $1,600 2026-06-12
Discourse HIGH 7.5
CVE-2026-44786

Discourse is an open-source discussion platform. From versions 2026.1.0-latest to before 2026.1.4, 2026.3.0-latest to before 2026.3.1, and 2026.4.0-l…

Fix: 2026.1.0 / 2026.1.4+
Fix from $1,950 2026-06-12
Discourse MEDIUM 6.5
CVE-2026-44784

Discourse is an open-source discussion platform. From versions 2026.1.0-latest to before 2026.1.4, 2026.3.0-latest to before 2026.3.1, and 2026.4.0-l…

Fix: 2026.1.0 / 2026.1.4+
Fix from $1,600 2026-06-12
Discourse MEDIUM 5.4
CVE-2026-44783

Discourse is an open-source discussion platform. From versions 2026.1.0-latest to before 2026.1.4, 2026.3.0-latest to before 2026.3.1, and 2026.4.0-l…

Fix: 2026.1.0 / 2026.1.4+
Fix from $1,600 2026-06-12
Discourse MEDIUM 5.3
CVE-2026-34154

Discourse is an open-source discussion platform. In versions prior to 2026.1.4, 2026.3.1, 2026.4.1 and 2026.5.0-latest.1, a vulnerability in the dis…

Fix: 2026.1.4 / 2026.3.1+
Fix from $1,600 2026-05-19
Discourse MEDIUM 5.3
CVE-2026-32244

Discourse is an open-source discussion platform. In versions prior to 2026.1.4, 2026.3.1, 2026.4.1 and 2026.5.0-latest.1, outdated cached AI summarie…

Fix: 2026.1.4 / 2026.3.1+
Fix from $1,600 2026-05-19
Discourse MEDIUM 5.3
CVE-2026-34947

Discourse is an open-source discussion platform. From versions 2026.1.0-latest to before 2026.1.3, 2026.2.0-latest to before 2026.2.2, and 2026.3.0-l…

Fix: after 2026.2.1
Fix from $1,600 2026-04-03
Discourse MEDIUM 5.3
CVE-2026-27481

Discourse is an open-source discussion platform. From versions 2026.1.0-latest to before 2026.1.3, 2026.2.0-latest to before 2026.2.2, and 2026.3.0-l…

Fix: after 2026.2.1
Fix from $1,600 2026-04-03
Discourse MEDIUM 6.5
CVE-2026-33300

Discourse is an open-source discussion platform. From versions 2026.1.0-latest to before 2026.1.3, 2026.2.0-latest to before 2026.2.2, and 2026.3.0-l…

Fix: 2026.1.3 / 2026.2.2+
Fix from $1,600 2026-03-31
Discourse MEDIUM 5.0
CVE-2026-33185

Discourse is an open-source discussion platform. From versions 2026.1.0-latest to before 2026.1.3, 2026.2.0-latest to before 2026.2.2, and 2026.3.0-l…

Fix: 2026.1.3 / 2026.2.2+
Fix from $1,600 2026-03-31
Discourse MEDIUM 5.3
CVE-2026-33073

Discourse is an open-source discussion platform. From versions 2026.1.0-latest to before 2026.1.3, 2026.2.0-latest to before 2026.2.2, and 2026.3.0-l…

Fix: 2026.1.3 / 2026.2.2+
Fix from $1,600 2026-03-31
Discourse MEDIUM 5.3
CVE-2026-33074

Discourse is an open-source discussion platform. From versions 2026.1.0-latest to before 2026.1.3, 2026.2.0-latest to before 2026.2.2, and 2026.3.0-l…

Fix: 2026.1.3 / 2026.2.2+
Fix from $1,600 2026-03-31
Discourse MEDIUM 5.4
CVE-2026-32607

Discourse is an open-source discussion platform. From versions 2026.1.0-latest to before 2026.1.3, 2026.2.0-latest to before 2026.2.2, and 2026.3.0-l…

Fix: 2026.1.3 / 2026.2.2+
Fix from $1,600 2026-03-31
Discourse MEDIUM 5.4
CVE-2026-32615

Discourse is an open-source discussion platform. From versions 2026.1.0-latest to before 2026.1.3, 2026.2.0-latest to before 2026.2.2, and 2026.3.0-l…

Fix: 2026.1.3 / 2026.2.2+
Fix from $1,600 2026-03-31
Discourse MEDIUM 6.5
CVE-2026-32143

Discourse is an open-source discussion platform. From versions 2026.1.0-latest to before 2026.1.3, 2026.2.0-latest to before 2026.2.2, and 2026.3.0-l…

Fix: 2026.1.3 / 2026.2.2+
Fix from $1,600 2026-03-31
Discourse MEDIUM 6.1
CVE-2026-32113

Discourse is an open-source discussion platform. From versions 2026.1.0-latest to before 2026.1.3, 2026.2.0-latest to before 2026.2.2, and 2026.3.0-l…

Fix: 2026.1.3 / 2026.2.2+
Fix from $1,600 2026-03-31
Discourse MEDIUM 5.4
CVE-2026-32243

Discourse is an open-source discussion platform. From versions 2026.1.0-latest to before 2026.1.3, 2026.2.0-latest to before 2026.2.2, and 2026.3.0-l…

Fix: 2026.1.3 / 2026.2.2+
Fix from $1,600 2026-03-31
Discourse MEDIUM 5.4
CVE-2026-32273

Discourse is an open-source discussion platform. From versions 2026.1.0-latest to before 2026.1.3, 2026.2.0-latest to before 2026.2.2, and 2026.3.0-l…

Fix: 2026.1.3 / 2026.2.2+
Fix from $1,600 2026-03-31