Skip to content
Security
فارسی
Sign in / Register
Vulnerabilities
Products
Plugins
All products
github.com/apache/answer
Go
· Package
9 reports
Vulnerability alerts
Follow
Package, identifier or title
Search
Severity
All
Critical
High
Medium
Low
Unknown
Fix status
All
Fix reported
No fix reported
Sort by
Recently updated
Highest severity
Report
Product
Ecosystem
Severity
Fix status
Last updated
Apache Answer vulnerable to Cross-site Scripting
CVE-2026-34033 · GHSA-6QWM-5FM9-CVJX
github.com/apache/answer
github.com/apache/incubator-answer
Go
Medium
Fix reported
2026-08-18
Apache Answer has an Unrestricted Upload of File with Dangerous Type vulnerability
CVE-2026-34031 · GHSA-X4F6-MQG6-28XX
github.com/apache/answer
github.com/apache/incubator-answer
Go
Medium
Fix reported
2026-08-18
Apache Answer has an Exposure of Sensitive Information to an Unauthorized Actor vulnerability
CVE-2026-34905 · GHSA-85R2-PVG8-89R9
github.com/apache/answer
github.com/apache/incubator-answer
Go
Medium
Fix reported
2026-08-18
Apache Answer has an Improper Neutralization of Alternate XSS Syntax vulnerability
CVE-2026-25688 · GHSA-HMR2-99JM-8X45
github.com/apache/answer
github.com/apache/incubator-answer
Go
Medium
Fix reported
2026-08-18
Apache Answer: AdminToken not invalidated after admin deactivation
CVE-2026-25700 · GHSA-4GW2-VG4X-7P29
Version ranges need review.
github.com/apache/answer
github.com/apache/incubator-answer
Go
High
Fix reported
2026-08-18
Apache Answer has an Exposure of Private Personal Information to an Unauthorized Actor vulnerability
CVE-2026-25699 · GHSA-W754-5646-XQ9J
github.com/apache/answer
github.com/apache/incubator-answer
Go
Medium
Fix reported
2026-08-18
Apache Answer has an Unrestricted Upload of File with Dangerous Type vulnerability
CVE-2026-33582 · GHSA-V553-G2W6-295P
github.com/apache/answer
github.com/apache/incubator-answer
Go
Medium
Fix reported
2026-08-18
Apache Answer User Using External Images Potentially Discloses User Information
CVE-2025-29868 · GHSA-WQCC-MFHW-53PC
Version ranges need review.
github.com/apache/answer
Go
Low
Fix reported
2026-03-03
Apache Answer Exposure of Private Personal Information to an Unauthorized Actor vulnerability
CVE-2026-24735 · GHSA-5W5R-8XC6-2XHW
Version ranges need review.
github.com/apache/answer
Go
Medium
Fix reported
2026-02-05