CVE-2025-68934

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2025-68934
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-68934.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2025-68934
Aliases
Published
2026-01-28T19:19:59Z
Modified
2026-09-29T11:48:16Z
Severity
  • 6.5 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
Summary
Discourse Has Denial of Service (DoS) Vulnerability in Drafts Creation Endpoint
Details

Discourse is an open source discussion platform. In versions prior to 3.5.4, 2025.11.2, 2025.12.1, and 2026.1.0, authenticated users can submit crafted payloads to /drafts.json that cause O(n^2) processing in Base62.decode, tying up workers for 35-60 seconds per request. This affects all users as the shared worker pool becomes exhausted. This issue is patched in versions 3.5.4, 2025.11.2, 2025.12.1, and 2026.1.0. Lowering the max_draft_length site setting reduces attack surface but does not fully mitigate the issue, as payloads under the limit can still trigger the slow code path.

Database specific 
{
    "cna_assigner":  "GitHub_M",
    "cwe_ids":  [
        "CWE-770"
    ],
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/68xxx/CVE-2025-68934.json",
    "unresolved_ranges":  [
        {
            "extracted_events":  [
                {
                    "fixed":  "3.5.4"
                },
                {
                    "introduced":  ">= 2025.12.0-latest, 2025.12.1"
                },
                {
                    "last_affected":  ">= 2025.12.0-latest, 2025.12.1"
                }
            ],
            "source":  "AFFECTED_FIELD"
        }
    ]
}
References

Affected packages

Git / github.com/discourse/discourse

Affected ranges

Type
GIT
Repo
https://github.com/discourse/discourse
Events
Introduced
75d61b40ee928a4620b16f5438ca886678fab00d
Fixed
f31b18139a7aadbc4a5f7e8e565a6f4376010c3a
Introduced
322d3c0ac6a8f133b3f82875e9dbbe310f638c1b
Fixed
322d3c0ac6a8f133b3f82875e9dbbe310f638c1b
Database specific
Show details 
{
    "extracted_events":  [
        {
            "introduced":  "2025.11.0-latest"
        },
        {
            "fixed":  "2025.11.2"
        },
        {
            "introduced":  "2026.1.0-latest"
        },
        {
            "fixed":  "2026.1.0"
        }
    ],
    "source":  "AFFECTED_FIELD"
}

Affected versions

v2025.*
v2025.11.0
v2025.11.1

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-68934.json"