All vulnerabilities

Servers and applications

GHSA-rrpc-6h6v-cq9h

Markdown root route leaks Latest topic list on login_required sites

Severity
Medium 5.3
Published
10 Nov 2026
Last changed
10 Nov 2026
Added to UpHeron
10 Nov 2026
Fixed in
2026.9.2, 2026.10.1, 2026.11.0-latest.1
Sources
Project advisories (GitHub)

Affected software

SoftwareAffected versions
DiscourseServers and applications · github:discourse/discourse
  • Every version before 2026.11.0-latest.1
  • From 2026.9.0-latest before 2026.9.2
  • From 2026.10.0-latest before 2026.10.1

References