https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-17T15:23:03.322053+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bit-discourse-2023-47120 BIT-discourse-2023-47120 — Discourse DoS through Onebox favicon URL 2026-10-17T15:23:03.376072+00:00

Affected: Bitnami: discourse

Discourse is an open source platform for community discussion. In versions 3.1.0 through 3.1.2 of the `stable` branch and versions 3.1.0,beta6 through 3.2.0.beta2 of the `beta` and `tests-passed` branches, Redis memory can be depleted by crafting a site with an abnormally long favicon URL and drafting multiple posts which Onebox it. The issue is patched in version 3.1.3 of the `stable` branch and version 3.2.0.beta3 of the `beta` and `tests-passed` branches. There are no known workarounds.

 https://cve.radiocsirt.org/vuln/euvd-2026-161174 EUVD-2026-161174 2026-10-17T15:23:03.376145+00:00 EUVD-2026-161174 https://cve.radiocsirt.org/vuln/fkie_cve-2023-47120 fkie_cve-2023-47120 2026-10-17T15:23:03.376167+00:00

Discourse is an open source platform for community discussion. In versions 3.1.0 through 3.1.2 of the `stable` branch and versions 3.1.0,beta6 through 3.2.0.beta2 of the `beta` and `tests-passed` branches, Redis memory can be depleted by crafting a site with an abnormally long favicon URL and drafting multiple posts which Onebox it. The issue is patched in version 3.1.3 of the `stable` branch and version 3.2.0.beta3 of the `beta` and `tests-passed` branches. There are no known workarounds.

 https://cve.radiocsirt.org/vuln/gsd-2023-47120 gsd-2023-47120 2026-10-17T15:23:03.376208+00:00 gsd-2023-47120