CVE-2021-41271: Discourse

Medium severity, CVSS 5.3. EPSS: 1% chance of exploitation in the next 30 days.

Discourse is a platform for community discussion. In affected versions a maliciously crafted request could cause an error response to be cached by intermediate proxies. This could cause a loss of confidentiality for some content. This issue is patched in the latest stable, beta and tests-passed versions of Discourse.

Affected products

• Discourse Discourse: up to and including 2.7.9; version 2.8.0 only

Published 2021-11-15. Last modified 2026-06-17.