https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 18 Oct 2026 19:44:50 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-159392 EUVD-2026-159392 https://cve.radiocsirt.org/vuln/euvd-2026-159392 https://cve.radiocsirt.org/vuln/fkie_cve-2024-24817 <p>Discourse Calendar adds the ability to create a dynamic calendar in the first post of a topic on the open-source discussion platform Discourse. Prior to version 0.4, event invitees created in topics in private categories or PMs (private messages) can be retrieved by anyone, even if they&#39;re not logged in. This problem is resolved in version 0.4 of the discourse-calendar plugin. While no known workaround is available, putting the site behind `login_required` will disallow this endpoint to be used by anonymous users, but logged in users can still get the list of invitees in the private topics.</p> <p>Discourse Calendar adds the ability to create a dynamic calendar in the first post of a topic on the open-source discussion platform Discourse. Prior to version 0.4, event invitees created in topics in private categories or PMs (private messages) can be retrieved by anyone, even if they&#39;re not logged in. This problem is resolved in version 0.4 of the discourse-calendar plugin. While no known workaround is available, putting the site behind `login_required` will disallow this endpoint to be used by anonymous users, but logged in users can still get the list of invitees in the private topics.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-24817 https://cve.radiocsirt.org/vuln/gsd-2024-24817 gsd-2024-24817 https://cve.radiocsirt.org/vuln/gsd-2024-24817