CVE-2023-49098 (published 2024-01-12T20:37:26.516Z)
Discourse-reactions is a plugin that allows user to add their reactions to the post. Data about a user's reaction notifications could be exposed. This vulnerability was patched in commit 2c26939.
Affected products: Vendor: discourse
Product: discourse-reactions
Versions: < commit 2c26939