https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Sun, 31 May 2026 13:02:30 +0000 https://vulnerability.circl.lu/sighting/d4a7ea4d-257a-4872-b3ae-bd0cf66c1f31/export {"uuid": "d4a7ea4d-257a-4872-b3ae-bd0cf66c1f31", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-24808", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/8845", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-24808\n\ud83d\udd25 CVSS Score: 4.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N)\n\ud83d\udd39 Description: Discourse is an open-source discussion platform. Prior to versions `3.3.4` on the `stable` branch and `3.4.0.beta5` on the `beta` branch, someone who is about to reach the limit of users in a group DM may send requests to add new users in parallel. The requests might all go through ignoring the limit due to a race condition. The patch in versions `3.3.4` and `3.4.0.beta5` uses the `lock` step in service to wrap part of the `add_users_to_channel` service inside a distributed lock/mutex in order to avoid the race condition.\n\ud83d\udccf Published: 2025-03-26T14:08:38.915Z\n\ud83d\udccf Modified: 2025-03-26T14:14:38.212Z\n\ud83d\udd17 References:\n1. https://github.com/discourse/discourse/security/advisories/GHSA-hfcx-qjw6-573r\n2. https://github.com/discourse/discourse/commit/a16b2f224860f6678f89f5ffa012f0ede17e4095", "creation_timestamp": "2025-03-26T14:25:09.000000Z"} {"uuid": "d4a7ea4d-257a-4872-b3ae-bd0cf66c1f31", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-24808", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/8845", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-24808\n\ud83d\udd25 CVSS Score: 4.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N)\n\ud83d\udd39 Description: Discourse is an open-source discussion platform. Prior to versions `3.3.4` on the `stable` branch and `3.4.0.beta5` on the `beta` branch, someone who is about to reach the limit of users in a group DM may send requests to add new users in parallel. The requests might all go through ignoring the limit due to a race condition. The patch in versions `3.3.4` and `3.4.0.beta5` uses the `lock` step in service to wrap part of the `add_users_to_channel` service inside a distributed lock/mutex in order to avoid the race condition.\n\ud83d\udccf Published: 2025-03-26T14:08:38.915Z\n\ud83d\udccf Modified: 2025-03-26T14:14:38.212Z\n\ud83d\udd17 References:\n1. https://github.com/discourse/discourse/security/advisories/GHSA-hfcx-qjw6-573r\n2. https://github.com/discourse/discourse/commit/a16b2f224860f6678f89f5ffa012f0ede17e4095", "creation_timestamp": "2025-03-26T14:25:09.000000Z"} https://vulnerability.circl.lu/sighting/d4a7ea4d-257a-4872-b3ae-bd0cf66c1f31/export Wed, 26 Mar 2025 14:25:09 +0000 https://vulnerability.circl.lu/sighting/57228ff8-9f5a-46e6-861e-f87f58747d56/export {"uuid": "57228ff8-9f5a-46e6-861e-f87f58747d56", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-24808", "type": "seen", "source": "https://t.me/cvedetector/21178", "content": "{\n \"Source\": \"CVE FEED\",\n \"Title\": \"CVE-2025-24808 - Discourse Race Condition in Group DM User Addition\", \n \"Content\": \"CVE ID : CVE-2025-24808 \nPublished : March 26, 2025, 2:15 p.m. | 28\u00a0minutes ago \nDescription : Discourse is an open-source discussion platform. Prior to versions 3.3.4 on the `stable` branch and `3.4.0.beta5` on the `beta` branch, someone who is about to reach the limit of users in a group DM may send requests to add new users in parallel. The requests might all go through ignoring the limit due to a race condition. The patch in versions `3.3.4` and `3.4.0.beta5` uses the `lock` step in service to wrap part of the `add_users_to_channel` service inside a distributed lock/mutex in order to avoid the race condition. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n \"Detection Date\": \"26 Mar 2025\",\n \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-26T16:23:54.000000Z"} {"uuid": "57228ff8-9f5a-46e6-861e-f87f58747d56", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-24808", "type": "seen", "source": "https://t.me/cvedetector/21178", "content": "{\n \"Source\": \"CVE FEED\",\n \"Title\": \"CVE-2025-24808 - Discourse Race Condition in Group DM User Addition\", \n \"Content\": \"CVE ID : CVE-2025-24808 \nPublished : March 26, 2025, 2:15 p.m. | 28\u00a0minutes ago \nDescription : Discourse is an open-source discussion platform. Prior to versions 3.3.4 on the `stable` branch and `3.4.0.beta5` on the `beta` branch, someone who is about to reach the limit of users in a group DM may send requests to add new users in parallel. The requests might all go through ignoring the limit due to a race condition. The patch in versions `3.3.4` and `3.4.0.beta5` uses the `lock` step in service to wrap part of the `add_users_to_channel` service inside a distributed lock/mutex in order to avoid the race condition. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n \"Detection Date\": \"26 Mar 2025\",\n \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-26T16:23:54.000000Z"} https://vulnerability.circl.lu/sighting/57228ff8-9f5a-46e6-861e-f87f58747d56/export Wed, 26 Mar 2025 16:23:54 +0000