PT-2026-66440

Name of the Vulnerable Software and Affected Versions Node.js versions 22.x Node.js versions 24.x Node.js versions 26.x Description A flaw in HTTP/2 handling allows the nghttp2 session mem send function to be called re-entrantly while nghttp2 session mem recv is executing. This sequence leads to ...

Discourse 信息泄露漏洞

Discourse is an open-source community discussion platform developed by Discourse. This platform includes features such as communities, email communication, and chat rooms. Versions of Discourse from 2026.1.0-latest to 2026.1.3, from 2026.2.0-latest to 2026.2.2, and from 2026.3.0-latest to 2026.3....

CVE-2026-30891

Discourse is an open-source discussion platform. Prior to versions 2026.3.0-latest.1, 2026.2.1, and 2026.1.2, a user could access another user's private activity due to insufficient authorization checks in the user actions endpoint. Versions 2026.3.0-latest.1, 2026.2.1, and 2026.1.2 contain a pat...