https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-22T11:38:56.691502+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bit-discourse-2026-33411 BIT-discourse-2026-33411 — Discourse's solved topic stream has potential stored XSS in topic title 2026-10-22T11:38:56.696125+00:00

Affected: Bitnami: discourse

Discourse is an open-source discussion platform. Versions prior to 2026.3.0, 2026.2.1, and 2026.1.2 have a potential stored XSS in topic titles for the solved posts stream. Versions 2026.3.0, 2026.2.1, and 2026.1.2 contain a patch. As a workaround, ensure that the Content Security Policy is enabled, and has not been modified in a way which would make it more vulnerable to XSS attacks.

 https://cve.radiocsirt.org/vuln/euvd-2026-277238 EUVD-2026-277238 2026-10-22T11:38:56.696198+00:00 EUVD-2026-277238 https://cve.radiocsirt.org/vuln/fkie_cve-2026-33411 fkie_cve-2026-33411 2026-10-22T11:38:56.696221+00:00

Discourse is an open-source discussion platform. Versions prior to 2026.3.0-latest.1, 2026.2.1, and 2026.1.2 have a potential stored XSS in topic titles for the solved posts stream. Versions 2026.3.0-latest.1, 2026.2.1, and 2026.1.2 contain a patch. As a workaround, ensure that the Content Security Policy is enabled, and has not been modified in a way which would make it more vulnerable to XSS attacks.