DI
Product
discourse
294
CVEs
0
On KEV
9.9
Max CVSS
4
New 30D
Severity mix
Critical 8High 49Medium 217Low 20
Watch
Add discourse to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-23616 | 4.3 | Jan 28 | Discourse is an open-source discussion platform Affected: before 3.0.1; 1.1.0; 1.1.0; 1.1.0; 1.1.0; 1.1.0; +34 more |
| CVE-2022-46159 | 4.3 | Dec 2 | Discourse is an open-source discussion platform Affected: through 2.8.13; 2.9.0; 2.9.0; 2.9.0; 2.9.0; 2.9.0; +8 more |
| CVE-2022-46150 | 4.3 | Nov 29 | Discourse is an open-source discussion platform Affected: before 2.8.13; 2.9.0; 2.9.0; 2.9.0; 2.9.0; 2.9.0; +7 more |
| CVE-2022-41944 | 4.3 | Nov 28 | Discourse is an open-source discussion platform Affected: through 2.8.11; 2.9.0; 2.9.0; 2.9.0; 2.9.0; 2.9.0; +7 more |
| CVE-2022-41921 | 4.3 | Nov 28 | Discourse is an open-source discussion platform Affected: before 2.9.0; 2.9.0; 2.9.0; 2.9.0; 2.9.0; 2.9.0; +7 more |
| CVE-2022-39232 | 4.3 | Sep 29 | Discourse vulnerable to incomplete quote causing a topic to crash in the browser Affected: >= 2.9.0.beta5, < 2.9.0.beta10 |
| CVE-2022-39226 | 4.3 | Sep 29 | Discourse user profile location and website fields were not sufficiently length-limited Affected: < 2.8.9; >= 2.9.0.beta0, < 2.9.0.beta10 |
| CVE-2022-36068 | 4.3 | Sep 29 | Discourse moderators can edit themes via the API Affected: < 2.8.9; >= 2.9.0.beta0, < 2.9.0.beta10 |
| CVE-2022-24850 | 4.3 | Apr 14 | Discourse is an open source platform for community discussion Affected: before 2.8.2; 2.9.0; 2.9.0; 2.9.0 |
| CVE-2022-24782 | 4.3 | Mar 24 | Discourse is an open source discussion platform Affected: through 2.8.2 |
| CVE-2022-21678 | 4.3 | Jan 13 | Discourse is an open source discussion platform Affected: before 2.7.13; 2.8.0; 2.8.0; 2.8.0; 2.8.0; 2.8.0; +5 more |
| CVE-2022-21642 | 4.3 | Jan 5 | Discourse is an open source platform for community discussion Affected: before 2.7.13; 2.8.0; 2.8.0; 2.8.0; 2.8.0; 2.8.0; +5 more |
| CVE-2021-43793 | 4.3 | Dec 1 | Discourse is an open source discussion platform Affected: before 2.7.11; 2.8.0; 2.8.0; 2.8.0; 2.8.0; 2.8.0; +2 more |
| CVE-2021-43792 | 4.3 | Dec 1 | Discourse is an open source discussion platform Affected: before 2.7.11; 2.8.0; 2.8.0; 2.8.0; 2.8.0; 2.8.0; +2 more |
| CVE-2021-37703 | 4.3 | Aug 13 | Discourse is an open-source platform for community discussion Affected: before 2.7.8; 2.8.0; 2.8.0; 2.8.0; 2.8.0 |
| CVE-2021-32788 | 4.3 | Jul 27 | Discourse is an open source discussion platform Affected: before 2.7.7 |
| CVE-2026-84302 | 4.2 | Sep 24 | Discourse: Non-participant moderators can read, edit, and delete PM content through Discourse AI reviewables Affected: < 2026.7.0; >= 2026.6.0-latest, < 2026.6.1; >= 2026.5.0-latest, < 2026.5.2; >= 2026.1.0-latest, < 2026.1.6 |