Discourse CVE-2026-53961: Forged AWS SNS Bounce Notifications Disable Email via Missing TopicArn Validation

github.com 2026-07-10查看中文 →

Security AdvisoryCVE-2026-53961MediumDiscourse

Affected:

Discourse >= 2026.5.0-latest
Discourse >= 2026.4.0-latest
Discourse >= 2026.1.0-latest

Fixed in:

2026.6.0
2026.5.1
2026.4.2
2026.1.5

Referenced CVEs: CVE-2026-53961 · 6.5

文章内图片已隐藏以节省流量 · Upgrade to Pro to view images & offline archive

This content was auto-fetched from github.com, cleaned by our LLM pipeline, and translated to English. View original.

More from this source

nebula-mesh authz gateway operator status check bypass fix 2026-07-24 Nebula API Authorization Bypass: Cross-Tenant Privilege Escalation & Host Takeover 2026-07-24 CVE-2025-47722: Missing Security Headers Vulnerability and Go Fix Middleware 2026-07-24 AWS Bedrock AgentCore RCE via install_packages() (CVE-2026-16796) 2026-07-24 CVE-2024-4722 Nebula YAML Injection Vulnerability Advisory 2026-07-24

Offline Archive

Offline screenshot & PDF are Pro-exclusive