Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 19 Oct 2026 21:38:35 +0000 BIT-discourse-2026-29072 — Discourse missing permission check for policy creation in discourse-policy https://cve.radiocsirt.org/vuln/bit-discourse-2026-29072 <p><strong>Affected:</strong> Bitnami: discourse</p> <p>Discourse is an open-source discussion platform. Prior to versions 2026.3.0, 2026.2.1, and 2026.1.2, users who do not belong to the allowed policy creation groups can create functional policy acceptance widgets in posts under the right conditions. Versions 2026.3.0, 2026.2.1, and 2026.1.2 contain a patch. As a workaround, disable the discourse-policy plugin by disabling the `policy_enabled` site setting.</p> <p><strong>Affected:</strong> Bitnami: discourse</p> <p>Discourse is an open-source discussion platform. Prior to versions 2026.3.0, 2026.2.1, and 2026.1.2, users who do not belong to the allowed policy creation groups can create functional policy acceptance widgets in posts under the right conditions. Versions 2026.3.0, 2026.2.1, and 2026.1.2 contain a patch. As a workaround, disable the discourse-policy plugin by disabling the `policy_enabled` site setting.</p> https://cve.radiocsirt.org/vuln/bit-discourse-2026-29072 EUVD-2026-276683 https://cve.radiocsirt.org/vuln/euvd-2026-276683 EUVD-2026-276683 https://cve.radiocsirt.org/vuln/euvd-2026-276683 fkie_cve-2026-29072 https://cve.radiocsirt.org/vuln/fkie_cve-2026-29072 <p>Discourse is an open-source discussion platform. Prior to versions 2026.3.0-latest.1, 2026.2.1, and 2026.1.2, users who do not belong to the allowed policy creation groups can create functional policy acceptance widgets in posts under the right conditions. Versions 2026.3.0-latest.1, 2026.2.1, and 2026.1.2 contain a patch. As a workaround, disable the discourse-policy plugin by disabling the `policy_enabled` site setting.</p> <p>Discourse is an open-source discussion platform. Prior to versions 2026.3.0-latest.1, 2026.2.1, and 2026.1.2, users who do not belong to the allowed policy creation groups can create functional policy acceptance widgets in posts under the right conditions. Versions 2026.3.0-latest.1, 2026.2.1, and 2026.1.2 contain a patch. As a workaround, disable the discourse-policy plugin by disabling the `policy_enabled` site setting.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-29072