https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-28T06:14:31.889080+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bit-discourse-2025-24972 BIT-discourse-2025-24972 — Discourse may bypass user preference when adding users to chat groups 2026-10-28T06:14:31.891293+00:00

Affected: Bitnami: discourse

Discourse is an open-source discussion platform. Prior to versions `3.3.4` on the `stable` branch and `3.4.0.beta5` on the `beta` branch, in specific circumstances, users could be added to group direct messages despite disabling direct messaging in their preferences. Versions `3.3.4` and `3.4.0.beta5` contain a patch for the issue. A workaround is available. If a user disables chat in their preferences then they cannot be added to new group chats.

 https://cve.radiocsirt.org/vuln/euvd-2026-225383 EUVD-2026-225383 2026-10-28T06:14:31.891346+00:00 EUVD-2026-225383 https://cve.radiocsirt.org/vuln/fkie_cve-2025-24972 fkie_cve-2025-24972 2026-10-28T06:14:31.891362+00:00

Discourse is an open-source discussion platform. Prior to versions `3.3.4` on the `stable` branch and `3.4.0.beta5` on the `beta` branch, in specific circumstances, users could be added to group direct messages despite disabling direct messaging in their preferences. Versions `3.3.4` and `3.4.0.beta5` contain a patch for the issue. A workaround is available. If a user disables chat in their preferences then they cannot be added to new group chats.