Discourse

    Dashboard / Vendors

    Products: 22
    Vulnerabilities: 324
    Known Exploited: 0
    6
    Critical Level Threats
    53
    High Level Threats
    225
    Medium Level Threats
    33
    Low Level Threats

    Vulnerabilities

    100806040200
    JanFebMarAprMayJunJulAugSepOctNovDec
    Critical Level Threats
    High Level Threats
    Medium Level Threats
    Low Level Threats

    Products Security index

    Actions
    Items Per Page

    Vulnerabilities

    CVE-2017-20290

    Discourse < 1.9.0.beta13 Reflected XSS via /email/unsubscribed

    Last Modified: Oct 22, 2026
    Published: Oct 22, 2026

    CVE-2026-57447

    Discourse Doc Categories: Doc category index refresh leaks private topic titles

    Last Modified: Oct 26, 2026
    Published: Oct 16, 2026

    CVE-2026-55103

    Discourse ActivityPub: Fix inbound actor validation and apply outbound request SSRF hardening

    Last Modified: Oct 28, 2026
    Published: Oct 15, 2026

    CVE-2026-91157

    Discourse: Media uploads remain publicly accessible after category permissions are restricted

    Last Modified: Oct 24, 2026
    Published: Oct 14, 2026

    CVE-2026-91156

    Discourse: Chat MessageBus delivers read-restricted messages to unauthorized users

    Last Modified: Oct 22, 2026
    Published: Oct 14, 2026
    Items Per Page