https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-18T18:44:36.410978+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2024-26145 CVE-2024-26145 — Uninvited user is able to join and mark the attendance of the the private event 2026-10-18T18:44:36.412030+00:00

Affected: discourse-calendar

Discourse Calendar adds the ability to create a dynamic calendar in the first post of a topic on Discourse. Uninvited users are able to gain access to private events by crafting a request to update their attendance. This problem is resolved in commit dfc4fa15f340189f177a1d1ab2cc94ffed3c1190. As a workaround, one may use post visibility to limit access.