Ghostscript

A security write-up details an exploit chain against Discourse's image pipeline that combines a JPEG race condition with vulnerabilities in GhostScript and ImageMagick to achieve arbitrary file reading. The flaws are chained so a single malicious image upload can walk through multiple components and expose files on the server. Security teams running self-hosted Discourse forums are being urged to update their installations and review exposure.