CVE-2026-53961

Discourse is an open-source discussion platform. Prior to 2026.6.0, 2026.5.1, 2026.4.2, and 2026.1.5, the AWS SES bounce webhook at POST /webhooks/aws verified that SNS messages were signed by Amazon but did not bind them to trusted TopicArn values, allowing any AWS account holder to publish...

CVE-2026-53961 Discourse: Forged AWS SNS bounce notifications can disable a targeted user's email (missing TopicArn binding)

Discourse is an open-source discussion platform. Prior to 2026.6.0, 2026.5.1, 2026.4.2, and 2026.1.5, the AWS SES bounce webhook at POST /webhooks/aws verified that SNS messages were signed by Amazon but did not bind them to trusted TopicArn values, allowing any AWS account holder to publish...

CVE-2026-53961

CVE-2026-53961 concerns Discourse, an open-source discussion platform. Prior to the fixed versions, the AWS SES bounce webhook at POST /webhooks/aws did not bind SNS-signed messages to trusted TopicArn values, enabling any AWS account holder to publish forged Bounce notifications that revoke a ta...

GHSA-MG7H-Q7HW-M596 vulnerabilities

Vulnerabilities for packages: linux-aws...

CVE-2026-53228 vulnerabilities

Vulnerabilities for packages: linux-qemu-melange, linux-azure, linux-vmware, linux-qemu, linux-gcp, linux-aws...

CVE-2026-53225 vulnerabilities

Vulnerabilities for packages: linux-qemu-melange, linux-azure, linux-vmware, linux-qemu, linux-gcp, linux-aws...

GHSA-38RG-2RJC-3RMJ vulnerabilities

Vulnerabilities for packages: linux-qemu-melange, linux-azure, linux-vmware, linux-qemu, linux-gcp, linux-aws...

GHSA-3J78-PF43-6MVQ vulnerabilities

Vulnerabilities for packages: linux-qemu-melange, linux-azure, linux-vmware, linux-qemu, linux-gcp, linux-aws...

GHSA-5Q2P-7748-G6QP vulnerabilities

Vulnerabilities for packages: linux-qemu-melange, linux-azure, linux-vmware, linux-qemu, linux-gcp, linux-aws...

GHSA-6GQ6-HXJH-9GRQ vulnerabilities

Vulnerabilities for packages: linux-qemu-melange, linux-azure, linux-vmware, linux-qemu, linux-gcp, linux-aws...

GHSA-5R3H-V82J-R7RR vulnerabilities

Vulnerabilities for packages: linux-qemu-melange, linux-azure, linux-vmware, linux-qemu, linux-gcp, linux-aws...

CVE-2026-53195 vulnerabilities

Vulnerabilities for packages: linux-qemu-melange, linux-azure, linux-vmware, linux-qemu, linux-gcp, linux-aws...

CVE-2026-53189 vulnerabilities

Vulnerabilities for packages: linux-qemu-melange, linux-azure, linux-vmware, linux-qemu, linux-gcp, linux-aws...

CVE-2026-53186 vulnerabilities

Vulnerabilities for packages: linux-qemu-melange, linux-azure, linux-vmware, linux-qemu, linux-gcp, linux-aws...

CVE-2026-53196 vulnerabilities

Vulnerabilities for packages: linux-qemu-melange, linux-azure, linux-vmware, linux-qemu, linux-gcp, linux-aws...

GHSA-4PQW-3H25-QRQ3 vulnerabilities

Vulnerabilities for packages: linux-qemu-melange, linux-azure, linux-vmware, linux-qemu, linux-gcp, linux-aws...

GHSA-7Q5M-QV9W-C8XX vulnerabilities

Vulnerabilities for packages: linux-qemu-melange, linux-azure, linux-vmware, linux-qemu, linux-gcp, linux-aws...

GHSA-J962-FX34-5263 vulnerabilities

Vulnerabilities for packages: linux-qemu-melange, linux-azure, linux-vmware, linux-qemu, linux-gcp, linux-aws...

GHSA-Q6QM-26CH-2W94 vulnerabilities

Vulnerabilities for packages: linux-qemu-melange, linux-azure, linux-vmware, linux-qemu, linux-gcp, linux-aws...

GHSA-62M5-M548-5V5F vulnerabilities

Vulnerabilities for packages: linux-qemu-melange, linux-azure, linux-vmware, linux-qemu, linux-gcp, linux-aws...