8 matches found
BIT-DISCOURSE-2026-33073 discourse-subscriptions plugin leaking stripe API key in multisite environment
Discourse is an open-source discussion platform. From versions 2026.1.0 to before 2026.1.3, and 2026.2.0 to before 2026.2.2, the discourse-subscriptions plugin leaks stripe API keys across sites in a multisite cluster resulting in the potential for stripe related information to be leaked across...
5.3CVSS5.7AI score0.00292EPSS
SaveExploits0References3
20