Lucene search
+L

1 matches found

Cvelist
Cvelist
added 2026/02/26 7:58 p.m.26 views

CVE-2026-27162 DIscourse doesn't prevent whispers to leak in excerpts

Discourse is an open source discussion platform. Prior to versions 2025.12.2, 2026.1.1, and 2026.2.0, postsnearby was checking topic access but then returning all posts regardless of type, including whispers that should only be visible to whisperers. Use Post.securedguardian to properly filter po...

7.1CVSS0.00227EPSS
SaveExploits0References1
Rows per page
Query Builder