It appears there is a CVE out for the discourse admin page. 100005 DotNetNuke - File Inclusion - CVE:CVE-2018-9126, CVE:CVE-2011-1892. Cloudflare was triggered while trying to update my discourse installation it 403’d this URI /admin/docker/latest?path=%2Fvar%2Fwww%2Fdiscourse&version=c093fa0&branc…

Neither of these are related to Discourse. Recommend you take this up with cloudflare and disable the orange cloudflare acceleration button

Cool deal I’ll flag this as a false positive on my end and move on thanks Sam!

Discourse Vulnerability [False Positive]

Topic		Replies	Views
Using Discourse with Cloudflare: Best Practices Self-Hosting how-to , cloudflare	28	6063	April 26, 2026
Discourse Vulnerability CVE-2021-41163 Self-hosting	10	1552	October 30, 2021
Discourse & Cloudflare Self-hosting	48	5870	January 26, 2024
Sucuri reports a malware infection? Support	5	2495	June 5, 2016
Cloudflare with Discourse Self-hosting	47	6561	January 8, 2020