https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T01:47:58.072737+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2025-64528 CVE-2025-64528 — Users are able to find users by name even when `enable_names` is off 2026-10-05T01:47:58.091420+00:00

Affected: discourse

Discourse is an open source discussion platform. Prior to versions 3.5.3, 2025.11.1, and 2025.12.0, an attacker who knows part of a username can find the user and their full name via UI or API, even when `enable_names` is disabled. Versions 3.5.3, 2025.11.1, and 2025.12.0 contain a fix.