Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-59828 |
|
Information Disclosure in discourse (CVE-2026-59828)
vulnerability in discourse (CVE-2026-59828). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-55424 |
|
Cross-Site Scripting (XSS) in discourse (CVE-2026-55424)
cross-site scripting in discourse (CVE-2026-55424). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-53963 |
|
Cross-Site Scripting (XSS) in discourse (CVE-2026-53963)
cross-site scripting in discourse (CVE-2026-53963). Confidential information can be exposed externally.
|
| CVE-2026-46413 |
|
Vulnerability in discourse (CVE-2026-46413)
vulnerability in discourse (CVE-2026-46413). Data can be tampered with by attackers.
|
| CVE-2026-49256 |
|
Information Disclosure in discourse (CVE-2026-49256)
vulnerability in discourse (CVE-2026-49256). Confidential information can be exposed externally.
|
| CVE-2026-53961 |
|
Vulnerability in discourse (CVE-2026-53961)
vulnerability in discourse (CVE-2026-53961). Risk of unauthorized operations or information disclosure. Exploitable via `POST /webhooks/aws`.
|
| CVE-2026-53962 |
|
Cross-Site Scripting (XSS) in discourse (CVE-2026-53962)
cross-site scripting in discourse (CVE-2026-53962). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-44787 |
|
Privilege Escalation in discourse (CVE-2026-44787)
vulnerability in discourse (CVE-2026-44787). Confidential information can be exposed externally.
|
| CVE-2026-45780 |
|
Information Disclosure in discourse (CVE-2026-45780)
vulnerability in discourse (CVE-2026-45780). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-45788 |
|
Information Disclosure in discourse (CVE-2026-45788)
vulnerability in discourse (CVE-2026-45788). Confidential information can be exposed externally.
|
| CVE-2026-55420 |
|
OS Command Injection in discourse (CVE-2026-55420)
OS command injection in discourse (CVE-2026-55420). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `2026.6.0` or later.
|
| CVE-2026-45085 |
|
Information Disclosure in discourse (CVE-2026-45085)
vulnerability in discourse (CVE-2026-45085). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-45775 |
|
Path Traversal in path-traversal (CVE-2026-45775)
path traversal in path-traversal (CVE-2026-45775). Confidential information can be exposed externally.
|
| CVE-2026-47263 |
|
Information Disclosure in discourse (CVE-2026-47263)
vulnerability in discourse (CVE-2026-47263). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-47264 |
|
Information Disclosure in discourse (CVE-2026-47264)
vulnerability in discourse (CVE-2026-47264). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-44784 |
|
Information Disclosure in discourse (CVE-2026-44784)
vulnerability in discourse (CVE-2026-44784). Confidential information can be exposed externally.
|
| CVE-2026-44785 |
|
Information Disclosure in discourse (CVE-2026-44785)
vulnerability in discourse (CVE-2026-44785). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-44786 |
|
Information Disclosure in discourse (CVE-2026-44786)
vulnerability in discourse (CVE-2026-44786). Confidential information can be exposed externally.
|
| CVE-2026-44779 |
|
Information Disclosure in discourse (CVE-2026-44779)
vulnerability in discourse (CVE-2026-44779). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-44783 |
|
Vulnerability in discourse (CVE-2026-44783)
vulnerability in discourse (CVE-2026-44783). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-44782 |
|
Information Disclosure in discourse (CVE-2026-44782)
vulnerability in discourse (CVE-2026-44782). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-44780 |
|
Information Disclosure in discourse (CVE-2026-44780)
vulnerability in discourse (CVE-2026-44780). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-34154 |
|
Vulnerability in discourse (CVE-2026-34154)
vulnerability in discourse (CVE-2026-34154). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2026.1.4, 2026.3.1, 2026.4.1` or later.
|
| CVE-2026-33514 |
|
Vulnerability in discourse (CVE-2026-33514)
vulnerability in discourse (CVE-2026-33514). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2026.1.4, 2026.3.1, 2026.4.1` or later.
|
| CVE-2026-32244 |
|
Information Disclosure in discourse (CVE-2026-32244)
vulnerability in discourse (CVE-2026-32244). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2026.1.4, 2026.3.1, 2026.4.1` or later.
|
| CVE-2026-34947 |
|
Information Disclosure in discourse (CVE-2026-34947)
vulnerability in discourse (CVE-2026-34947). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-27481 |
|
Information Disclosure in discourse (CVE-2026-27481)
vulnerability in discourse (CVE-2026-27481). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-33415 |
|
Vulnerability in discourse (CVE-2026-33415)
vulnerability in discourse (CVE-2026-33415). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-33300 |
|
Information Disclosure in discourse (CVE-2026-33300)
vulnerability in discourse (CVE-2026-33300). Confidential information can be exposed externally.
|
| CVE-2026-33185 |
|
SSRF (Server-Side Request Forgery) in discourse (CVE-2026-33185)
SSRF in discourse (CVE-2026-33185). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-33074 |
|
Privilege Escalation in discourse (CVE-2026-33074)
vulnerability in discourse (CVE-2026-33074). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-33073 |
|
Information Disclosure in discourse (CVE-2026-33073)
vulnerability in discourse (CVE-2026-33073). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-32951 |
|
Information Disclosure in discourse (CVE-2026-32951)
vulnerability in discourse (CVE-2026-32951). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-32620 |
|
Information Disclosure in discourse (CVE-2026-32620)
vulnerability in discourse (CVE-2026-32620). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-32619 |
|
Vulnerability in discourse (CVE-2026-32619)
vulnerability in discourse (CVE-2026-32619). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-32618 |
|
Information Disclosure in discourse (CVE-2026-32618)
vulnerability in discourse (CVE-2026-32618). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-32615 |
|
Vulnerability in discourse (CVE-2026-32615)
vulnerability in discourse (CVE-2026-32615). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-32607 |
|
Cross-Site Scripting (XSS) in discourse (CVE-2026-32607)
cross-site scripting in discourse (CVE-2026-32607). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-32273 |
|
Cross-Site Scripting (XSS) in discourse (CVE-2026-32273)
cross-site scripting in discourse (CVE-2026-32273). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-32243 |
|
Cross-Site Scripting (XSS) in discourse (CVE-2026-32243)
cross-site scripting in discourse (CVE-2026-32243). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-32143 |
|
Information Disclosure in c (CVE-2026-32143)
vulnerability in c (CVE-2026-32143). Confidential information can be exposed externally.
|
| CVE-2026-32113 |
|
Open Redirect in discourse (CVE-2026-32113)
vulnerability in discourse (CVE-2026-32113). Risk of unauthorized operations or information disclosure.
|