Two newly disclosed vulnerabilities in Discourse let unauthenticated attackers execute JavaScript against anonymous visitors ...
A Discourse image upload exploit allowed basic users to read server files by chaining a JPEG processing delay, Ghostscript ...