Two newly disclosed vulnerabilities in Discourse let unauthenticated attackers execute JavaScript against anonymous visitors ...
A Discourse image upload exploit allowed basic users to read server files by chaining a JPEG processing delay, Ghostscript ...
The path traversal bug allows attackers to include arbitrary filesystem content in generated PDFs when file paths are not properly validated. A now-fixed critical flaw in the jsPDF library could ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results