# Discourse CVE RSS Feed

**URL:** https://meta.discourse.org/t/discourse-cve-rss-feed/207257
**Category:** Support
**Created:** [October 27, 2021, 1:43pm UTC](https://meta.discourse.org/t/discourse-cve-rss-feed/207257 "2021-10-27T13:43:54Z")
**Posts on this page:** 5
**Page:** 1

<div class="post-metadata">

### Author: ![ishan](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/ishan/32/182322_2.png) [@ishan](https://meta.discourse.org/u/ishan)
#### Post date: [October 27, 2021, 1:43pm UTC](https://meta.discourse.org/t/discourse-cve-rss-feed/207257/1 "2021-10-27T13:43:54Z")

</div>

Hi there!

I manage a few Discourse instances and I usually have a fixed update schedule. (Every two weeks)

A RCE vulnerability was recently reported in discourse which was then reported by someone via our Bug bounty system.

Is there a RSS Feed of vulnerabilities reported in Discourse? That way, I can subscribe to the feed and update the systems as soon as a fix is out instead of just completely missing it for a few days even when a fix was available.

Thank you

---

<div class="post-metadata">

### Author: ![Falco](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/falco/32/179432_2.png) [@Falco](https://meta.discourse.org/u/Falco)
#### Post date: [October 27, 2021, 1:48pm UTC](https://meta.discourse.org/t/discourse-cve-rss-feed/207257/2 "2021-10-27T13:48:51Z")

</div>

Something like [https://www.cvedetails.com/vulnerability-feed.php?vendor\_id=20185&product\_id=0&version\_id=0&orderby=1&cvssscoremin=0](https://www.cvedetails.com/vulnerability-feed.php?vendor_id=20185&product_id=0&version_id=0&orderby=1&cvssscoremin=0) ?

---

<div class="post-metadata">

### Author: ![pmusaraj](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/pmusaraj/32/119489_2.png) [@pmusaraj](https://meta.discourse.org/u/pmusaraj)
#### Post date: [October 27, 2021, 1:56pm UTC](https://meta.discourse.org/t/discourse-cve-rss-feed/207257/3 "2021-10-27T13:56:14Z")

</div>

You can also watch #release-notes, it will all list all releases, but the security ones are clearly highlighted there as well.

---

<div class="post-metadata">

### Author: ![ishan](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/ishan/32/182322_2.png) [@ishan](https://meta.discourse.org/u/ishan)
#### Post date: [October 27, 2021, 2:09pm UTC](https://meta.discourse.org/t/discourse-cve-rss-feed/207257/4 "2021-10-27T14:09:13Z")

</div>

Thank you! This is perfect. I was on their [site](https://www.cvedetails.com/product/57316/Discourse-Discourse.html?vendor_id=20185) earlier and missed the “Vulnerability feeds & Widgets” setting.

---

<div class="post-metadata">

### Author: ![system](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/system/32/443519_2.png) [@system](https://meta.discourse.org/u/system)
#### Post date: [November 26, 2021, 2:09pm UTC](https://meta.discourse.org/t/discourse-cve-rss-feed/207257/5 "2021-11-26T14:09:54Z")

</div>

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.