CISA Warns of Critical Code Execution Bug Impacting Thousands of Discourse Deployments

The vulnerable versions are 2.7.8 and older, and the best way to address the risk is to update to 2.7.9 or later, which came out on Friday. The latest beta and test versions have also been patched.