Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 16:51:15 +0000 CVE-2025-64528 — Users are able to find users by name even when `enable_names` is off https://cve.radiocsirt.org/vuln/cve-2025-64528 <p><strong>Affected:</strong> discourse</p> <p>Discourse is an open source discussion platform. Prior to versions 3.5.3, 2025.11.1, and 2025.12.0, an attacker who knows part of a username can find the user and their full name via UI or API, even when `enable_names` is disabled. Versions 3.5.3, 2025.11.1, and 2025.12.0 contain a fix.</p> <p><strong>Affected:</strong> discourse</p> <p>Discourse is an open source discussion platform. Prior to versions 3.5.3, 2025.11.1, and 2025.12.0, an attacker who knows part of a username can find the user and their full name via UI or API, even when `enable_names` is disabled. Versions 3.5.3, 2025.11.1, and 2025.12.0 contain a fix.</p> https://cve.radiocsirt.org/vuln/cve-2025-64528