https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-17T12:27:54.701960+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bit-discourse-2023-38684 BIT-discourse-2023-38684 — Discourse vulnerable to ossible DDoS due to unbounded limits in various controller actions 2026-10-17T12:27:54.761589+00:00

Affected: Bitnami: discourse

Discourse is an open source discussion platform. Prior to version 3.0.6 of the `stable` branch and version 3.1.0.beta7 of the `beta` and `tests-passed` branches, in multiple controller actions, Discourse accepts limit params but does not impose any upper bound on the values being accepted. Without an upper bound, the software may allow arbitrary users to generate DB queries which may end up exhausting the resources on the server. The issue is patched in version 3.0.6 of the `stable` branch and version 3.1.0.beta7 of the `beta` and `tests-passed` branches. There are no known workarounds for this vulnerability.

 https://cve.radiocsirt.org/vuln/euvd-2026-194735 EUVD-2026-194735 2026-10-17T12:27:54.761656+00:00 EUVD-2026-194735 https://cve.radiocsirt.org/vuln/fkie_cve-2023-38684 fkie_cve-2023-38684 2026-10-17T12:27:54.761674+00:00

Discourse is an open source discussion platform. Prior to version 3.0.6 of the `stable` branch and version 3.1.0.beta7 of the `beta` and `tests-passed` branches, in multiple controller actions, Discourse accepts limit params but does not impose any upper bound on the values being accepted. Without an upper bound, the software may allow arbitrary users to generate DB queries which may end up exhausting the resources on the server. The issue is patched in version 3.0.6 of the `stable` branch and version 3.1.0.beta7 of the `beta` and `tests-passed` branches. There are no known workarounds for this vulnerability.

 https://cve.radiocsirt.org/vuln/gsd-2023-38684 gsd-2023-38684 2026-10-17T12:27:54.761701+00:00 gsd-2023-38684