PT-2026-5193

Name of the Vulnerable Software and Affected Versions Discourse versions prior to 3.5.4 Discourse versions prior to 2025.11.2 Discourse versions prior to 2025.12.1 Discourse versions prior to 2026.1.0 Description Discourse is an open source discussion platform. Authenticated users can submit...

Discourse: Denial of Service (DoS) Vulnerability in Drafts Creation Endpoint

A Denial of Service DoS vulnerability was identified in the /drafts.json endpoint on the Discourse forum. Large payloads around 800,000 characters or more submitted to create drafts caused the server to process the request, return a 502 Bad Gateway error, but still save the draft. Submitting...