https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-23T20:22:14.089474+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2022-21678 CVE-2022-21678 — User's bio visible even if profile is restricted in Discourse 2026-10-23T20:22:14.105367+00:00

Affected: discourse

Discourse is an open source discussion platform. Prior to version 2.8.0.beta11 in the `tests-passed` branch, version 2.8.0.beta11 in the `beta` branch, and version 2.7.13 in the `stable` branch, the bios of users who made their profiles private were still visible in the `<meta>` tags on their users' pages. The problem is patched in `tests-passed` version 2.8.0.beta11, `beta` version 2.8.0.beta11, and `stable` version 2.7.13 of Discourse.