Discourse: Chat upload filenames rendered as raw HTML in excerpts

Discourse: Group SMTP test endpoint susceptible to SSRF

Discourse has Unauthorized Post Data Exposure in discourse-user-notes

DIscourse doesn't prevent whispers to leak in excerpts

Users can see other user's tagged PMs in Discourse

Denial of service via Watched Words in Discourse

Multisite denial of service through unsanitized dynamic dispatch to SiteSetting in Discourse

Discourse vulnerable to multisite DoS by spamming backups

Possible Server-Side Request Forgery (SSRF) in webhooks

Discourse: Stored XSS in the moderation review queue

Discourse: Wildcard iframe origin allowlist bypass via authority separators

Discourse: Shared-draft titles and excerpts leak through group post serialization

Discourse: Review queue exposes flag-related private message excerpts to category group moderators

Discourse: Templates endpoint exposes hidden tag names

Discourse: Private Chat Threat Message Disclosure via Chat Onebox Channel/Threat ID Mismatch

Discourse: Duplicate lookup reveals restricted topic titles through canonicalized URLs

Discourse: Private event sample invitees are serialized to non-invited event viewers

Discourse: Prevent webhook payload disclosure on event redelivery

Discourse: Hidden reply-to post raw can be disclosed through AI explain prompts

Discourse: GroupPostSerializer leaks hidden full names through reaction post association

Discourse: Category queue reviewers can read raw incoming emails from queued posts

Discourse: Bot debug endpoints disclose whisper translation audit logs

Discourse: Information Disclosure in Form Template API Due to Missing Authorization

Discourse: Authorization bypass in oneboxer via user-controlled category id

Discourse: Missing post-level authorization allows whisper metadata disclosure

Discourse: Insufficient topic visibility check allows unauthorized poll manipulation in private categories

Discourse: Unauthorized channel membership inference via excluded_memberships_channel_id

PM access granted through invites after access revocation

Discourse staff can modify any user's group notification level

Discourse exposes ip_address of flagged user

Discourse's unscoped status lookups leak restricted metadata

Discourse: Composer mentions endpoint leaks hidden group membership through PM `allowed_names` check

Discourse fixes loose hostname matching in spam host allowlist

Discourse has a bypass of official warnings messages by non-staff users

Privilege Escalation via Mass Assignment Allows Regular Users to Set Topics as Global Banners

Discourse doesn't scope reviewable notes to user-visible reviewables

Discourse AI Suggestions Contain Insecure Direct Object Reference

Discourse DM limits aren’t always properly enforced

Discourse may bypass user preference when adding users to chat groups

Potential bypass of chat permissions in Discourse

Denial of service by the absence of restrictions on replies to posts in Discourse

Prevent topic list filtering by hidden tags for unauthorized users in Discourse

Discourse doesn't limit reviewable user serializer payload

Discourse secure uploads accessible to guests even when login is required

Insufficient control of custom field value sizes

Discourse's restricted tag information visible to unauthenticated users

Discourse vulnerable to DoS via post edit reason

Topic Title Validation Skipped When Changing Category in Discourse

Discourse: Presence of read restricted topics may be leaked if tagged with a tag that is visible to all users

Presence of restricted personal Discourse messages may be leaked if tagged with a tag