https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-10T19:02:19.857287+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bit-discourse-2023-30606 BIT-discourse-2023-30606 — Multisite denial of service through unsanitized dynamic dispatch to SiteSetting in Discourse 2026-10-10T19:02:19.860205+00:00

Affected: Bitnami: discourse

Discourse is an open source platform for community discussion. In affected versions a user logged as an administrator can call arbitrary methods on the `SiteSetting` class, notably `#clear_cache!` and `#notify_changed!`, which when done on a multisite instance, can affect the entire cluster resulting in a denial of service. Users not running in multisite environments are not affected. This issue is patched in the latest stable, beta and tests-passed versions of Discourse. Users are advised to upgrade. There are no known workarounds for this vulnerability.

 https://cve.radiocsirt.org/vuln/euvd-2026-214024 EUVD-2026-214024 2026-10-10T19:02:19.860255+00:00 EUVD-2026-214024 https://cve.radiocsirt.org/vuln/fkie_cve-2023-30606 fkie_cve-2023-30606 2026-10-10T19:02:19.860271+00:00

Discourse is an open source platform for community discussion. In affected versions a user logged as an administrator can call arbitrary methods on the `SiteSetting` class, notably `#clear_cache!` and `#notify_changed!`, which when done on a multisite instance, can affect the entire cluster resulting in a denial of service. Users not running in multisite environments are not affected. This issue is patched in the latest stable, beta and tests-passed versions of Discourse. Users are advised to upgrade. There are no known workarounds for this vulnerability.

 https://cve.radiocsirt.org/vuln/gsd-2023-30606 gsd-2023-30606 2026-10-10T19:02:19.860294+00:00 gsd-2023-30606