51803 matches found
CVE-2026-53961
Discourse is an open-source discussion platform. Prior to 2026.6.0, 2026.5.1, 2026.4.2, and 2026.1.5, the AWS SES bounce webhook at POST /webhooks/aws verified that SNS messages were signed by Amazon but did not bind them to trusted TopicArn values, allowing any AWS account holder to publish...
CVE-2026-53962
Discourse is an open-source discussion platform. Prior to 2026.6.0, 2026.5.1, 2026.4.2, and 2026.1.5, insufficient SVG sanitization in upload and user avatar handling could lead to cross-site scripting when a user visited specific URLs that are not normally part of community browsing. This issue ...
CVE-2026-49256
Discourse is an open-source discussion platform. Prior to 2026.6.0, 2026.5.1, 2026.4.2, and 2026.1.5, restricted tag and tag-group names attached to publicly readable categories as allowedtags, allowedtaggroups, or required tag groups could leak to anonymous and unauthorized users through categor...
CVE-2026-46413
Discourse is an open-source discussion platform. Prior to 2026.6.0, 2026.5.1, 2026.4.2, and 2026.1.5, regular users could route direct S3 multipart uploads through ExternalUploadManager into the admin backup store. This issue is fixed in versions 2026.6.0, 2026.5.1, 2026.4.2, and 2026.1.5...
CVE-2026-53961
CVE-2026-53961 concerns Discourse, an open-source discussion platform. Prior to the fixed versions, the AWS SES bounce webhook at POST /webhooks/aws did not bind SNS-signed messages to trusted TopicArn values, enabling any AWS account holder to publish forged Bounce notifications that revoke a ta...
GHSA-PQPW-CVM4-8MV9 Avo: Direct attachment upload endpoint lacks upload authorization and bypasses field-level upload policy
Summary Avo's direct attachment upload endpoint lacks server-side upload authorization and bypasses the documented field-level upload policy methods such as uploadFIELDID?. An authenticated Avo user who can reach the Avo attachment upload endpoint can replace or add attachment content, including...
CVE-2026-55212 Pimcore: Insufficient Permission Check on Class Definition Creation Endpoint Allows Privilege Escalation
Pimcore is an Open Source Data & Experience Management Platform. Prior to 2025.4.6 and 2026.1.6, the Studio API class definition creation endpoint POST /pimcore-studio/api/class/definition/configuration-view/detail/create is guarded by the objects permission instead of the classes permission,...
GHSA-XQCF-GWJ9-5C88 vulnerabilities
Vulnerabilities for packages: linux-gcp, linux-azure, linux-qemu, linux-qemu-melange...
GHSA-3P98-FQ5J-WX55 vulnerabilities
Vulnerabilities for packages: linux-gcp, linux-azure, linux-qemu, linux-qemu-melange...
CVE-2026-52940 vulnerabilities
Vulnerabilities for packages: linux-gcp, linux-azure, linux-qemu, linux-qemu-melange...
CVE-2026-53253 vulnerabilities
Vulnerabilities for packages: linux-gcp, linux-azure, linux-qemu, linux-qemu-melange...
CVE-2026-53153 vulnerabilities
Vulnerabilities for packages: linux-gcp, linux-azure, linux-qemu, linux-qemu-melange...
GHSA-9Q58-8M4G-H5MX vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-CRVR-3R6G-3G4X vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-HPG9-WR8W-WG43 vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-J39G-274J-3WPM vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-M39P-2H74-V77Q vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-7M35-34RV-PMWH vulnerabilities
Vulnerabilities for packages: chromium...