Discourse/discourse
Discourse/discourse
0
0
Fork 0
mirror of https://github.com/discourse/discourse.git synced 2026-08-04 10:39:43 +08:00
Code Packages Activity Actions
discourse/plugins
History
Exact
discourse-patch-triage[bot] 37969503f2 SECURITY: Gate private event invitee details [backport 2026.1] 
Backport of #709 to release/2026.1.

---

## Summary

Fixes a private-event information disclosure in private event Invitee serialization.

## Security advisory

https://github.com/discourse/discourse/security/advisories/GHSA-22v7-6wgj-g9f7

## Source

- Patch Triage: https://patch.discourse.org/patch-triage/1057
- Original commit:

---

🤖 Auto-generated from the patch diff via Patch Triage. Review carefully before merging.
2026-06-30 16:27:06 +02:00
..
automation I18N: Update translations (#37916) 2026-02-25 09:47:58 -05:00
chat SECURITY: Channel member list exposes other users' chat read state and notification settings [backport 2026.1] (#40888) 2026-06-15 11:13:20 -05:00
checklist DEV: upgrade to fontawesome 7 (#36286) 2026-01-14 12:58:36 +01:00
discourse-adplugin I18N: Update translations (#37916) 2026-02-25 09:47:58 -05:00
discourse-affiliate I18N: Update translations (#37916) 2026-02-25 09:47:58 -05:00
discourse-ai SECURITY: Harden imagemagick execution [backport 2026.1] 2026-06-30 16:27:06 +02:00
discourse-apple-auth I18N: Update translations (#37916) 2026-02-25 09:47:58 -05:00
discourse-assign SECURITY: Honor group visibility in discourse-assign group lookups [backport 2026.1] (#41198) 2026-06-25 13:58:03 -03:00
discourse-cakeday I18N: Update translations (#37056) 2026-01-12 15:18:57 +01:00
discourse-calendar SECURITY: Gate private event invitee details [backport 2026.1] 2026-06-30 16:27:06 +02:00
discourse-chat-integration I18N: Update translations (#37916) 2026-02-25 09:47:58 -05:00
discourse-data-explorer SECURITY: Group report details expose raw Data Explorer SQL to non-admin group members [backport 2026.1] (#40951) 2026-06-16 14:28:31 -05:00
discourse-details I18N: Update translations (#37916) 2026-02-25 09:47:58 -05:00
discourse-gamification I18N: Update translations (#37916) 2026-02-25 09:47:58 -05:00
discourse-github I18N: Update translations (#37916) 2026-02-25 09:47:58 -05:00
discourse-graphviz SECURITY: Prevent Sidekiq DoS via Graphviz rendering [backport 2026.1] (#40752) 2026-06-10 18:13:50 +01:00
discourse-hcaptcha I18N: Update translations (#37916) 2026-02-25 09:47:58 -05:00
discourse-lazy-videos UX: add admin sidebar icons for preinstalled plugins (#36764) 2025-12-18 16:39:00 -05:00
discourse-local-dates I18N: Update translations (#37916) 2026-02-25 09:47:58 -05:00
discourse-login-with-amazon I18N: Update translations (#37916) 2026-02-25 09:47:58 -05:00
discourse-lti I18N: Update translations (#37101) 2026-01-14 09:39:58 +01:00
discourse-math I18N: Update translations (#37916) 2026-02-25 09:47:58 -05:00
discourse-microsoft-auth I18N: Update translations (#37056) 2026-01-12 15:18:57 +01:00
discourse-narrative-bot I18N: Update translations (#37916) 2026-02-25 09:47:58 -05:00
discourse-oauth2-basic I18N: Update translations (#37916) 2026-02-25 09:47:58 -05:00
discourse-openid-connect I18N: Update translations (#37916) 2026-02-25 09:47:58 -05:00
discourse-patreon SECURITY: authentication bypass vulnerability 2026-02-26 12:24:37 +00:00
discourse-policy SECURITY: Validate policy permissions on post save 2026-03-19 15:46:24 +00:00
discourse-post-voting I18N: Update translations (#37916) 2026-02-25 09:47:58 -05:00
discourse-presence I18N: Update translations (#37916) 2026-02-25 09:47:58 -05:00
discourse-reactions SECURITY: GroupPostSerializer leaks hidden full names through reaction post association [backport 2026.1] 2026-05-19 00:26:55 +01:00
discourse-rewind I18N: Update translations (#37916) 2026-02-25 09:47:58 -05:00
discourse-rss-polling I18N: Update translations (#37916) 2026-02-25 09:47:58 -05:00
discourse-solved SECURITY: escape solved topic title in stream 2026-03-19 15:46:24 +00:00
discourse-subscriptions SECURITY: Subscription contributors expose full user profile fields to anonymous viewers [backport 2026.1] (#40894) 2026-06-15 10:24:34 -05:00
discourse-templates I18N: Update translations (#37916) 2026-02-25 09:47:58 -05:00
discourse-topic-voting I18N: Update translations (#37916) 2026-02-25 09:47:58 -05:00
discourse-user-notes SECURITY: Unauthorized Post Data Exposure in discourse-user-notes Plugin 2026-03-19 15:46:24 +00:00
discourse-zendesk-plugin SECURITY: Block ticket creation when user can't see the topic 2026-03-19 15:46:24 +00:00
footnote I18N: Update translations (#37916) 2026-02-25 09:47:58 -05:00
poll SECURITY: Uncontrolled Resource Consumption in Number Poll Generation [backport 2026.1] (#41151) 2026-06-24 15:53:17 +10:00
spoiler-alert I18N: Update translations (#37916) 2026-02-25 09:47:58 -05:00
styleguide I18N: Update translations (#37916) 2026-02-25 09:47:58 -05:00