Discourse
- Total products in the ecosystem
- 3
- Total vulnerabilities (90 days)
- 33
en
Verify to analyze this security profile
As of 10/25/2026, Discourse recorded 33 security vulnerabilities in the last 90 days across 3 products, including 9 rated High or above and 0 known exploited vulnerabilities (KEV) that should be prioritized for immediate remediation.
Over the last 90 days, Discourse had the most security vulnerabilities in the Discourse ecosystem, with 31 vulnerabilities—approximately 93.94% of the provider's total vulnerabilities during this period.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
CVE-2017-20290Discourse < 1.9.0.beta13 Reflected XSS via /email/unsubscribedCVE-2026-57447Discourse Doc Categories: Doc category index refresh leaks private topic titlesCVE-2026-55103Discourse ActivityPub: Fix inbound actor validation and apply outbound request SSRF hardeningCVE-2026-91157Discourse: Media uploads remain publicly accessible after category permissions are restrictedCVE-2026-91156Discourse: Chat MessageBus delivers read-restricted messages to unauthorized users329 Results | Page 1 of 33
| SeverityMedium |
| SeverityHigh |
| SeverityHigh |
| SeverityHigh |
| SeverityHigh |
| SeverityMedium |
| SeverityMedium |
| SeverityMedium |
| SeverityMedium |