DI
Product
discourse
294
CVEs
0
On KEV
9.9
Max CVSS
4
New 30D
Severity mix
Critical 8High 49Medium 217Low 20
Watch
Add discourse to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-32113 | 6.1 | Mar 31 | Discourse: Open redirect via `sso_destination_url` cookie in `enter` Affected: >= 2026.1.0-latest, < 2026.1.3; >= 2026.2.0-latest, < 2026.2.2; >= 2026.3.0-latest, < 2026.3.0 |
| CVE-2026-27740 | 6.1 | Mar 19 | Discourse has Stored XSS in AI Triage Automation Affected: >= 2026.1.0-latest, < 2026.1.2; >= 2026.2.0-latest, < 2026.2.1; = 2026.3.0-latest |
| CVE-2026-27570 | 6.1 | Mar 19 | Discourse Vulnerable to Stored XSS via Shared AI Conversation Onebox Affected: >= 2026.1.0-latest, < 2026.1.2; >= 2026.2.0-latest, < 2026.2.1; = 2026.3.0-latest |
| CVE-2026-27154 | 6.1 | Feb 26 | Discourse has XSS when editing a malicious post Affected: < 2025.12.2; >= 2026.1.0-latest, < 2026.1.1; >= 2026.2.0-latest, < 2026.2.0 |
| CVE-2025-66488 | 6.1 | Jan 28 | Discourse allows script execution in uploaded HTML/XML files on S3 Affected: < 3.5.4; >= 2025.11.0-latest, < 2025.11.2; >= 2025.12.0-latest, < 2025.12.1; >= 2026.1.0-latest, < 2026.1.0 |
| CVE-2025-48954 | 6.1 | Jun 25 | Discourse is an open-source discussion platform Affected: before 3.5.0; 3.5.0; 3.5.0; 3.5.0; 3.5.0; 3.5.0 |
| CVE-2025-48062 | 6.1 | Jun 9 | Discourse is an open-source discussion platform Affected: before 3.4.4; before 3.5.0; 3.5.0; 3.5.0; 3.5.0; 3.5.0 |
| CVE-2025-22602 | 6.1 | Feb 4 | Discourse is an open source platform for community discussion Affected: before 3.3.4; before 3.4.0; 3.4.0; 3.4.0; 3.4.0 |
| CVE-2024-56328 | 6.1 | Feb 4 | Discourse is an open source platform for community discussion Affected: before 3.3.3; before 3.4.0; 3.4.0; 3.4.0; 3.4.0 |
| CVE-2024-52794 | 6.1 | Dec 19 | Magnific lightbox susceptible to Cross-site Scripting in Discourse Affected: stable: <= 3.3.2; beta: <= 3.4.0.beta3; tests-passed: <= 3.4.0.beta3 |
| CVE-2024-47772 | 6.1 | Oct 7 | Discourse is an open source platform for community discussion Affected: before 3.3.2; before 3.4.0; 3.4.0 |
| CVE-2024-39320 | 6.1 | Jul 30 | Discourse is an open source discussion platform Affected: before 3.2.5; 3.3.0; 3.3.0; 3.3.0; 3.3.0 |
| CVE-2024-37165 | 6.1 | Jul 30 | Discourse is an open source discussion platform Affected: before 3.2.3; 3.3.0; 3.3.0 |
| CVE-2024-35234 | 6.1 | Jul 3 | Discourse is an open-source discussion platform Affected: before 3.2.3; before 3.3.0; 3.3.0; 3.3.0 |
| CVE-2024-23834 | 6.1 | Jan 30 | Discourse is an open-source discussion platform Affected: before 3.1.5; before 3.2.0; 3.2.0; 3.2.0; 3.2.0; 3.2.0 |
| CVE-2023-47119 | 6.1 | Nov 10 | Discourse is an open source platform for community discussion Affected: before 3.1.3; before 3.2.0; 3.2.0; 3.2.0 |
| CVE-2023-36473 | 6.1 | Jul 13 | Discourse is an open source discussion platform Affected: before 3.0.5; 1.1.0; 1.1.0; 1.1.0; 1.1.0; 1.1.0; +34 more |
| CVE-2023-29196 | 6.1 | Apr 18 | Discourse is an open source platform for community discussion Affected: before 3.0.3; before 3.1.0; 3.1.0; 3.1.0; 3.1.0 |
| CVE-2023-26040 | 6.1 | Mar 17 | Discourse is an open-source discussion platform Affected: 3.1.0 |
| CVE-2023-22455 | 6.1 | Jan 5 | Discourse is an option source discussion platform Affected: before 2.8.14; 1.1.0; 1.1.0; 1.1.0; 1.1.0; 1.1.0; +34 more |
| CVE-2023-22454 | 6.1 | Jan 5 | Discourse is an option source discussion platform Affected: before 2.8.14; 1.1.0; 1.1.0; 1.1.0; 1.1.0; 1.1.0; +34 more |
| CVE-2021-41095 | 6.1 | Sep 27 | Discourse is an open source discussion platform Affected: through 2.7.7; 2.8.0; 2.8.0; 2.8.0; 2.8.0; 2.8.0; +1 more |
| CVE-2021-37633 | 6.1 | Aug 9 | Discourse is an open source discussion platform Affected: before 2.7.8; 2.8.0; 2.8.0 |
| CVE-2024-53991 | 5.9 | Dec 19 | Potential Backup file leaked via Nginx in Discourse Affected: stable: <= 3.3.2; beta: <= 3.4.0.beta3; tests-passed: <= 3.4.0.beta3 |
| CVE-2023-25167 | 5.7 | Feb 8 | Discourse is an open source discussion platform Affected: before 3.0.1; 3.1.0 |
| CVE-2022-31096 | 5.7 | Jun 27 | Discourse is an open source discussion platform Affected: through 2.8.4; 2.9.0; 2.9.0; 2.9.0; 2.9.0; 2.9.0 |
| CVE-2026-30888 | 5.5 | Mar 20 | Discourse has moderator privilege escalation via arbitrary post_id in suspend/silence endpoint Affected: < 2026.3.0-latest.1; >= 2026.2.0-latest, < 2026.2.1; >= 2026.1.0-latest, < 2026.1.2 |
| CVE-2022-23546 | 5.5 | Jan 5 | In version 2.9.0.beta14 of Discourse, an open-source discussion platform, maliciously embedded urls can leak an admin's digest of recent topics, possibly exposing private… Affected: before 2.9.0; 2.9.0; 2.9.0; 2.9.0; 2.9.0; 2.9.0; +8 more |
| CVE-2026-91120 | 5.4 | Sep 24 | Discourse: Stored HTML injection in video notification emails Affected: < 2026.8.0; >= 2026.7.0-latest, < 2026.7.2; >= 2026.6.0-latest, < 2026.6.3; >= 2026.1.0-latest, < 2026.1.8 |
| CVE-2026-91134 | 5.4 | Sep 24 | Discourse: Block post iframes whose encoded userinfo bypasses the allowed_iframes allowlist Affected: < 2026.8.0; >= 2026.7.0-latest, < 2026.7.2; >= 2026.6.0-latest, < 2026.6.3; >= 2026.1.0-latest, < 2026.1.8 |
| CVE-2026-59830 | 5.4 | Sep 21 | Discourse: Stored XSS via unescaped actor name in post actions Affected: < 2026.7.0 |
| CVE-2026-72725 | 5.4 | Aug 10 | Discourse: Stored XSS in staff action logs injects staff UI Affected: < 2026.1.6; >= 2026.5.0, < 2026.5.2; >= 2026.6.0, < 2026.6.1 |
| CVE-2026-53962 | 5.4 | Jul 9 | Discourse: Insufficient SVG sanitization logic Affected: >= 2026.1.0-latest, < 2026.1.5; >= 2026.4.0-latest, < 2026.4.2; >= 2026.5.0-latest, < 2026.5.1 |
| CVE-2026-55424 | 5.4 | Jul 9 | Discourse: Topic featured link susceptible to stored XSS Affected: >= 2026.1.0-latest, < 2026.1.5; >= 2026.4.0-latest, < 2026.4.2; >= 2026.5.0-latest, < 2026.5.1 |
| CVE-2026-44783 | 5.4 | Jun 12 | Discourse: Replying to a whisper lets non-whisperers create staff-only whisper posts Affected: >= 2026.1.0-latest, < 2026.1.4; >= 2026.3.0-latest, < 2026.3.1; >= 2026.4.0-latest, < 2026.4.1 |
| CVE-2026-32615 | 5.4 | Mar 31 | Discourse: Category group moderators can perform actions on topics in restricted categories without read access Affected: >= 2026.1.0-latest, < 2026.1.3; >= 2026.2.0-latest, < 2026.2.2; >= 2026.3.0-latest, < 2026.3.0 |
| CVE-2026-32607 | 5.4 | Mar 31 | Discourse: Stored XSS via unescaped assignee name Affected: >= 2026.1.0-latest, < 2026.1.3; >= 2026.2.0-latest, < 2026.2.2; >= 2026.3.0-latest, < 2026.3.0 |
| CVE-2026-32273 | 5.4 | Mar 31 | Discourse: XSS on category description update via API Affected: >= 2026.1.0-latest, < 2026.1.3; >= 2026.2.0-latest, < 2026.2.2; >= 2026.3.0-latest, < 2026.3.0 |
| CVE-2026-32243 | 5.4 | Mar 31 | Discourse: Stored XSS in discourse-ai shared conversations onebox Affected: >= 2026.1.0-latest, < 2026.1.3; >= 2026.2.0-latest, < 2026.2.2; >= 2026.3.0-latest, < 2026.3.0 |
| CVE-2026-33411 | 5.4 | Mar 20 | Discourse's solved topic stream has potential stored XSS in topic title Affected: >= 2026.1.0-latest, < 2026.1.2; >= 2026.2.0-latest, < 2026.2.1; = 2026.3.0-latest |
| CVE-2026-33291 | 5.4 | Mar 20 | Discourse user can create Zendesk tickets even when it does not have access to topic Affected: >= 2026.1.0-latest, < 2026.1.2; >= 2026.2.0-latest, < 2026.2.1; = 2026.3.0-latest |
| CVE-2026-33251 | 5.4 | Mar 20 | Discourse has a Hidden Solved topics permission bypass Affected: >= 2026.1.0-latest, < 2026.1.2; >= 2026.2.0-latest, < 2026.2.1; = 2026.3.0-latest |
| CVE-2026-33395 | 5.4 | Mar 19 | Discourse has stored click‑based XSS via Graphviz SVG javascript: links Affected: >= 2026.1.0-latest, < 2026.1.2; >= 2026.2.0-latest, < 2026.2.1; = 2026.3.0-latest |
| CVE-2026-33410 | 5.4 | Mar 19 | Discourse hardens chat DM channel creation and expansion Affected: >= 2026.1.0-latest, < 2026.1.2; >= 2026.2.0-latest, < 2026.2.1; = 2026.3.0-latest |
| CVE-2026-27166 | 5.4 | Mar 19 | Discourse vulnerable to HTML injection via prohibited iframe URLs Affected: < 2026.3.0-latest.1; >= 2026.2.0-latest, < 2026.2.1; >= 2026.1.0-latest, < 2026.1.2 |
| CVE-2026-28218 | 5.4 | Feb 26 | Discourse's Fail-Open Access Control in Data Explorer Plugin Allows Unauthorized SQL Query Execution Affected: < 2025.12.2; >= 2026.1.0-latest, < 2026.1.1; >= 2026.2.0-latest, < 2026.2.0 |
| CVE-2026-26207 | 5.4 | Feb 26 | DIscourse's discourse-policy plugin lacks post access check Affected: < 2025.12.2; >= 2026.1.0-latest, < 2026.1.1; >= 2026.2.0-latest, < 2026.2.0 |
| CVE-2025-69289 | 5.4 | Jan 28 | Discourse has insecure default configuration that allows non-admin moderators to takeover any non-staff account via email change Affected: < 3.5.4; >= 2025.11.0-latest, < 2025.11.2; >= 2025.12.0-latest, < 2025.12.1; >= 2026.1.0-latest, < 2026.1.0 |
| CVE-2025-68933 | 5.4 | Jan 28 | Discourse non-admin moderators can exfiltrate private content via post ownership transfer Affected: < 3.5.4; >= 2025.11.0-latest, < 2025.11.2; >= 2025.12.0-latest, < 2025.12.1; >= 2026.1.0-latest, < 2026.1.0 |
| CVE-2025-68660 | 5.4 | Jan 28 | Discourse AI Discover's continue conversation allows threat actor to impersonate user Affected: < 3.5.4; >= 2025.11.0-latest, < 2025.11.2; >= 2025.12.0-latest, < 2025.12.1; >= 2026.1.0-latest, < 2026.1.0 |