Hi, I’m getting messages from our central IT complaining that our Discourse instance is triggering a security warning on CVE-2021-41163, which regards the /webhooks/aws endpoint. I’ve told them that we’ve kept the software up to date since 2021 (we do a “launcher app rebuild” every month automatic…

Sounds like a bad CISO then… :roll_eyes: File a bug report at the scanner corp?

CVE-2021-41163 false positive

RGJ (Richard - Communiteq) 6 januari 2026 om 22:23 4

Sounds like a bad CISO then…

File a bug report at the scanner corp?

4 likes

Topic		Antwoorden	Weergaven
Discourse Vulnerability CVE-2021-41163 Installation	11	1418	29 november 2021
Unable to find discourse version 2.9.0.beta6 Support	4	643	4 juli 2022
Discourse Vulnerability [False Positive] Support	3	1489	10 juni 2019
Discourse updates - Microsoft Defender reports detection of Wacatac malware Support	7	164	4 februari 2025
Management of NVTs and CVEs Installation unsupported-install	8	982	25 juli 2022