What’s Vulnerable › Products

discourse-ai vulnerabilities

2 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 1 published in the last 12 months.

Check whether your discourse-ai version is affected

Latest discourse-ai vulnerabilities

• CVE-2024-54142 — Cross-site Scripting via Discourse-ai SharedAiConversation onebox in Discourse (CVSS 9.0)
• CVE-2024-23654 — discourse-ai admin-initiated SSRF when interacting with AI services (CVSS 7.2)