Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 14 Oct 2026 19:17:46 +0000 BIT-discourse-2026-45780 — Discourse: Private event sample invitees are serialized to non-invited event viewers https://cve.radiocsirt.org/vuln/bit-discourse-2026-45780 <p><strong>Affected:</strong> Bitnami: discourse</p> <p>Discourse is an open-source discussion platform. Prior to 2026.6.0, 2026.5.1, 2026.4.2, and 2026.1.5, EventSerializer could expose invited group names, sample invitees, and attendance statistics to users who could view the topic but were not entitled to view the private event invitee list. This issue is fixed in versions 2026.6.0, 2026.5.1, 2026.4.2, and 2026.1.5.</p> <p><strong>Affected:</strong> Bitnami: discourse</p> <p>Discourse is an open-source discussion platform. Prior to 2026.6.0, 2026.5.1, 2026.4.2, and 2026.1.5, EventSerializer could expose invited group names, sample invitees, and attendance statistics to users who could view the topic but were not entitled to view the private event invitee list. This issue is fixed in versions 2026.6.0, 2026.5.1, 2026.4.2, and 2026.1.5.</p> https://cve.radiocsirt.org/vuln/bit-discourse-2026-45780 EUVD-2026-336187 https://cve.radiocsirt.org/vuln/euvd-2026-336187 EUVD-2026-336187 https://cve.radiocsirt.org/vuln/euvd-2026-336187 fkie_cve-2026-45780 https://cve.radiocsirt.org/vuln/fkie_cve-2026-45780 <p>Discourse is an open-source discussion platform. Prior to 2026.6.0, 2026.5.1, 2026.4.2, and 2026.1.5, EventSerializer could expose invited group names, sample invitees, and attendance statistics to users who could view the topic but were not entitled to view the private event invitee list. This issue is fixed in versions 2026.6.0, 2026.5.1, 2026.4.2, and 2026.1.5.</p> <p>Discourse is an open-source discussion platform. Prior to 2026.6.0, 2026.5.1, 2026.4.2, and 2026.1.5, EventSerializer could expose invited group names, sample invitees, and attendance statistics to users who could view the topic but were not entitled to view the private event invitee list. This issue is fixed in versions 2026.6.0, 2026.5.1, 2026.4.2, and 2026.1.5.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-45780