# Unable to find discourse version 2.9.0.beta6

**URL:** https://meta.discourse.org/t/unable-to-find-discourse-version-2-9-0-beta6/231511
**Category:** Support
**Created:** [June 29, 2022, 11:58pm UTC](https://meta.discourse.org/t/unable-to-find-discourse-version-2-9-0-beta6/231511 "2022-06-29T23:58:52Z")
**Posts on this page:** 5
**Page:** 1

<div class="post-metadata">

### Author: ![41821](https://avatars.discourse-cdn.com/v4/letter/4/c4cdca/32.png) [@41821](https://meta.discourse.org/u/41821)
#### Post date: [June 29, 2022, 11:58pm UTC](https://meta.discourse.org/t/unable-to-find-discourse-version-2-9-0-beta6/231511/1 "2022-06-29T23:58:52Z")

</div>

hello,  
We’ve received an alert from this CVE that an instance of discourse is vulnerable to [https://www.cve.org/CVERecord?id=CVE-2022-31096](https://www.cve.org/CVERecord?id=CVE-2022-31096)

It is said that the fix is in 2.9.0.beta6 but I’m unable to find and upgrade to that version. Is anyone else having this problem?

---

<div class="post-metadata">

### Author: ![Benjamin\_D](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/benjamin_d/32/277831_2.png) [@Benjamin\_D](https://meta.discourse.org/u/Benjamin_D)
#### Post date: [June 30, 2022, 5:11am UTC](https://meta.discourse.org/t/unable-to-find-discourse-version-2-9-0-beta6/231511/3 "2022-06-30T05:11:35Z")

</div>

You’re right, the patch is there:  
[https://github.com/discourse/discourse/commit/115859964d6e3e92d6d933ffe8e1b330b12a3aca](https://github.com/discourse/discourse/commit/115859964d6e3e92d6d933ffe8e1b330b12a3aca)  
but there has not been any bump in version since 🤔

---

<div class="post-metadata">

### Author: ![pfaffman](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/pfaffman/32/120154_2.png) [@pfaffman](https://meta.discourse.org/u/pfaffman)
#### Post date: [June 30, 2022, 11:02am UTC](https://meta.discourse.org/t/unable-to-find-discourse-version-2-9-0-beta6/231511/8 "2022-06-30T11:02:28Z")

</div>

You can upgrade now and that commit will be applied. It’s not a critical security issue, so they didn’t bump the version to push it out.

---

<div class="post-metadata">

### Author: ![Osama](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/osama/32/98013_2.png) [@Osama](https://meta.discourse.org/u/Osama)
#### Post date: [July 4, 2022, 8:49am UTC](https://meta.discourse.org/t/unable-to-find-discourse-version-2-9-0-beta6/231511/9 "2022-07-04T08:49:48Z")

</div>

We do a beta bump for a high severity CVE shortly after the fix is released, but we missed to do that for the last CVE (CVE-2022-31096). We released 2.9.0.beta6 last week (Thursday) so this should be resolved now.

> [@2.9.0.beta6: Whisper Improvements, Loading Splash Screen, Security Fix, and more](https://meta.discourse.org/t/2-9-0-beta6-whisper-improvements-loading-splash-screen-security-fix-and-more/231585):
>
> New features in 2.9.0.beta6 Whispers now support groups Whispers are a great way for staff to communicate within a topic, without their post becoming public. Staff might share their thoughts on how to reply to a post, or discuss with each other whether to close a topic. Historically, whispers were a staff-only features. Users needed to be admins or moderators to see (and post) whispers. Now, using the whispers allowed groups site setting, additional groups can be granted permission to whisper. …

---

<div class="post-metadata">

### Author: ![Osama](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/osama/32/98013_2.png) [@Osama](https://meta.discourse.org/u/Osama)
#### Post date: [July 4, 2022, 8:49am UTC](https://meta.discourse.org/t/unable-to-find-discourse-version-2-9-0-beta6/231511/10 "2022-07-04T08:49:53Z")

</div>


