PT-2026-34030

FreeScout is a free self-hosted help desk and shared mailbox. Prior to version 1.8.215, when APP SHOW ONLY ASSIGNED CONVERSATIONS is enabled, direct conversation view correctly blocks users who are neither the assignee nor the creator. The save draft AJAX path is weaker. A direct POST can create ...

CVE-2025-68934

Discourse has a DoS vulnerability (CVE-2025-68934) in the /drafts.json endpoint. Authenticated users can submit crafted payloads that trigger O(n^2) processing in Base62.decode, tying up workers for 35–60 seconds per request and exhausting the shared worker pool. Affected versions are prior to 3....

CVE-2022-37251

Craft CMS 4.2.0.1 is vulnerable to Cross Site Scripting XSS via Drafts...