https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-09T12:47:20.044894+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2024-23654 CVE-2024-23654 — discourse-ai admin-initiated SSRF when interacting with AI services 2026-10-09T12:47:20.103036+00:00

Affected: discourse-ai

discourse-ai is the AI plugin for the open-source discussion platform Discourse. Prior to commit 94ba0dadc2cf38e8f81c3936974c167219878edd, interactions with different AI services are vulnerable to admin-initiated SSRF attacks. Versions of the plugin that include commit 94ba0dadc2cf38e8f81c3936974c167219878edd contain a patch. As a workaround, one may disable the discourse-ai plugin.