Information disclosure in Discourse
CVE-2026-49256
Discourse is an open-source discussion platform. Prior to 2026.6.0, 2026.5.1, 2026.4.2, and 2026.1.5, restricted tag and tag-group names attached to publicly readable categories as allowed_tags, allowed_tag_groups, or required tag groups c…
Vulnerability class: Information Disclosure
Affected products
- Discourse — versions >= 2026.1.0-latest, < 2026.1.5, >= 2026.4.0-latest, < 2026.4.2, >= 2026.5.0-latest, < 2026.5.1
Weakness classification (CWE)
References
- security-advisories@github.com (x_refsource_MISC)
- security-advisories@github.com (x_refsource_MISC)
- security-advisories@github.com (x_refsource_MISC)
- security-advisories@github.com (x_refsource_MISC)
- security-advisories@github.com (x_refsource_CONFIRM)