https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 14:47:33 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-367239 EUVD-2026-367239 https://cve.radiocsirt.org/vuln/euvd-2026-367239 https://cve.radiocsirt.org/vuln/fkie_cve-2026-24332 <p>Discord through 2026-01-16 allows gathering information about whether a user&#39;s client state is Invisible (and not actually offline) because the response to a WebSocket API request includes the user in the presences array (with &#34;status&#34;: &#34;offline&#34;), whereas offline users are omitted from the presences array. This is arguably inconsistent with the UI description of Invisible as &#34;You will appear offline.&#34; NOTE: a third-party report suggests that this was remediated later in 2026.</p> <p>Discord through 2026-01-16 allows gathering information about whether a user&#39;s client state is Invisible (and not actually offline) because the response to a WebSocket API request includes the user in the presences array (with &#34;status&#34;: &#34;offline&#34;), whereas offline users are omitted from the presences array. This is arguably inconsistent with the UI description of Invisible as &#34;You will appear offline.&#34; NOTE: a third-party report suggests that this was remediated later in 2026.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-24332 https://cve.radiocsirt.org/vuln/ghsa-984h-8phv-mf43 <p>Discord through 2026-01-16 allows gathering information about whether a user&#39;s client state is Invisible (and not actually offline) because the response to a WebSocket API request includes the user in the presences array (with &#34;status&#34;: &#34;offline&#34;), whereas offline users are omitted from the presences array. This is arguably inconsistent with the UI description of Invisible as &#34;You will appear offline.&#34;</p> <p>Discord through 2026-01-16 allows gathering information about whether a user&#39;s client state is Invisible (and not actually offline) because the response to a WebSocket API request includes the user in the presences array (with &#34;status&#34;: &#34;offline&#34;), whereas offline users are omitted from the presences array. This is arguably inconsistent with the UI description of Invisible as &#34;You will appear offline.&#34;</p> https://cve.radiocsirt.org/vuln/ghsa-984h-8phv-mf43