# Security Advisory regarding group messages title and participants being leaked within a 30 minutes window
**URL:** https://meta.discourse.org/t/security-advisory-regarding-group-messages-title-and-participants-being-leaked-within-a-30-minutes-window/203995
**Category:** General
**Created:** [September 20, 2021, 5:45am UTC](https://meta.discourse.org/t/security-advisory-regarding-group-messages-title-and-participants-being-leaked-within-a-30-minutes-window/203995 "2021-09-20T05:45:33Z")
**Posts on this page:** 3
**Page:** 1
### Author:  [@tgxworld](https://meta.discourse.org/u/tgxworld)
#### Post date: [September 20, 2021, 5:45am UTC](https://meta.discourse.org/t/security-advisory-regarding-group-messages-title-and-participants-being-leaked-within-a-30-minutes-window/203995/1 "2021-09-20T05:45:33Z")
Hi All,
We have published a [new security advisory](https://github.com/discourse/discourse/security/advisories/GHSA-vm3x-w6jm-j9vv) regarding a bad commit that was made on the `tests-passed` branch which resulted in group private messages having their title and participants leaked to all users.
The bad commit was present on the `tests-passed` branch from 2021-09-15T02:44:00Z → 2021-09-15T05:16:00Z. If your site is running against the `tests-passed` branch and an upgrade was done between the affected window, you’re advised to upgrade your site immediately to resolve the security problem.
---
### Author:  [@tgxworld](https://meta.discourse.org/u/tgxworld)
#### Post date: [September 20, 2021, 5:46am UTC](https://meta.discourse.org/t/security-advisory-regarding-group-messages-title-and-participants-being-leaked-within-a-30-minutes-window/203995/2 "2021-09-20T05:46:15Z")
---
### Author:  [@sam](https://meta.discourse.org/u/sam)
#### Post date: [September 22, 2021, 8:17pm UTC](https://meta.discourse.org/t/security-advisory-regarding-group-messages-title-and-participants-being-leaked-within-a-30-minutes-window/203995/3 "2021-09-22T20:17:59Z")