Two newly disclosed vulnerabilities in Discourse let unauthenticated attackers execute JavaScript against anonymous visitors and read server files as minimally privileged users. Published October 7, ...