0
0
Fork 0
mirror of https://github.com/discourse/discourse.git synced 2026-08-06 11:36:31 +08:00
discourse/lib/topic_query
Joffrey JAFFEUX fe26415df4 SECURITY: SQL injection in PM tag filtering
SQL injection in PM tag filtering (`list_private_messages_tag`) allows bypassing tag filter conditions, potentially disclosing unauthorized private message metadata.
2026-02-26 12:24:37 +00:00
..
private_message_lists.rb SECURITY: SQL injection in PM tag filtering 2026-02-26 12:24:37 +00:00