Hi, I’m getting messages from our central IT complaining that our Discourse instance is triggering a security warning on CVE-2021-41163, which regards the /webhooks/aws endpoint. I’ve told them that we’ve kept the software up to date since 2021 (we do a “launcher app rebuild” every month automatic…

Sounds like a bad CISO then… :roll_eyes: File a bug report at the scanner corp?

CVE-2021-41163 false positive

RGJ (Richard - Communiteq) January 6, 2026, 10:23pm 4

Sounds like a bad CISO then…

File a bug report at the scanner corp?

4 Likes

Topic		Replies	Views
Discourse Vulnerability CVE-2021-41163 Installation	11	1414	November 29, 2021
Unable to find discourse version 2.9.0.beta6 Support	4	643	July 4, 2022
Discourse Vulnerability [False Positive] Support	3	1487	June 10, 2019
Discourse updates - Microsoft Defender reports detection of Wacatac malware Support	7	153	February 4, 2025
Management of NVTs and CVEs Installation unsupported-install	8	977	July 25, 2022