CVE-2025-68934

Discourse has a DoS vulnerability (CVE-2025-68934) in the /drafts.json endpoint. Authenticated users can submit crafted payloads that trigger O(n^2) processing in Base62.decode, tying up workers for 35–60 seconds per request and exhausting the shared worker pool. Affected versions are prior to 3....