Data about what reactions were performed on a post in a private topic could be leaked.
The latest version of the Discourse Reactions plugin has the patch.
Disable the discourse-reactions plugin to fully mitigate the issue.
Impact
Data about what reactions were performed on a post in a private topic could be leaked.
Patches
The latest version of the Discourse Reactions plugin has the patch.
Workarounds
Disable the discourse-reactions plugin to fully mitigate the issue.