Approved changes feed: RSS · Atom

cpe:2.3:a:discourse:discourse:3.2.0:*:*:*:beta:*:*:*

part: a version: 3.2.0 update: *

VendorDiscourse (2d3c125b-857a-5933-b846-ed7f9d5e0225)
ProductDiscourse (4347364d-ae10-5ab6-a9ec-6e7dcaf78dd8)
Edition*
Language*
Software editionbeta
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/discourse/discourse purl2cpe 2026-06-01 10:13:03.589414
pkg:rpm/opensuse/discourse purl2cpe 2026-06-01 10:13:03.589415

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-32376 vulnerable 2026-06-03 15:00:40.691909 Discourse DM limits aren’t always properly enforced
Discourse is an open-source discussion platform. Prior to versions 3.4.3 on the stable branch and 3.5.0.beta3 on the beta branch, the users limit for a DM can be bypassed, thus giving the ability to potentially create a DM with every user from a site in it. This issue has been patched in stable version 3.4.3 and beta version 3.5.0.beta3.
Published: 2025-04-30T14:55:21.473Z
Updated: 2025-04-30T15:08:52.268Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.