Martin Weinelt 0f6171af43 discourse: 2026.8.0 -> 2026.9.0 ...

https://releases.discourse.org/changelog/v2026.9.0/

Fixes:
- CVE-2026-91159 Stored oEmbed HTML injection via allowed iframe
- CVE-2026-91157 Media uploads remain publicly accessible after category
  permissions are restricted
- CVE-2026-91156 Chat MessageBus delivers read-restricted messages to
  unauthorized users

2026-09-28 02:26:59 +02:00

57 KiB

Generated

Raw Permalink Blame History

View Raw