CVE-2025-61598
NoneCVSS
—
EPSS
0.3%
Published
Oct 28, 2025
CISA due date
—
The record
Discourse is missing Cache-Control response header on error responses
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Bitnami | discourse | 0 | 3.6.2 |
Related vulnerabilities
- CVE-2025-67723 Discourse is an open source discussion platform. Also affects discourse
- CVE-2025-64528 Discourse is an open source discussion platform. Also affects discourse
- CVE-2024-53991 Discourse is an open source platform for community discussion. Also affects discourse
- CVE-2026-105711 GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.0 before… CWE-524
- CVE-2026-105752 vLLM is an inference and serving engine for large language models. CWE-524
- CVE-2026-94543 Next.js is a React framework for building full-stack web applications. CWE-524
- CVE-2026-94484 Next.js is a React framework for building full-stack web applications. CWE-524
- CVE-2026-93748 http-cache-semantics through 4.2.0 fails to properly validate security-zeroed cache… CWE-524