All products

github.com/apache/answer

Go · Package
9 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Apache Answer vulnerable to Cross-site ScriptingCVE-2026-34033 · GHSA-6QWM-5FM9-CVJX github.com/apache/answergithub.com/apache/incubator-answer Go Medium Fix reported
Apache Answer has an Unrestricted Upload of File with Dangerous Type vulnerabilityCVE-2026-34031 · GHSA-X4F6-MQG6-28XX github.com/apache/answergithub.com/apache/incubator-answer Go Medium Fix reported
Apache Answer has an Exposure of Sensitive Information to an Unauthorized Actor vulnerabilityCVE-2026-34905 · GHSA-85R2-PVG8-89R9 github.com/apache/answergithub.com/apache/incubator-answer Go Medium Fix reported
Apache Answer has an Improper Neutralization of Alternate XSS Syntax vulnerabilityCVE-2026-25688 · GHSA-HMR2-99JM-8X45 github.com/apache/answergithub.com/apache/incubator-answer Go Medium Fix reported
Apache Answer: AdminToken not invalidated after admin deactivationCVE-2026-25700 · GHSA-4GW2-VG4X-7P29Version ranges need review. github.com/apache/answergithub.com/apache/incubator-answer Go High Fix reported
Apache Answer has an Exposure of Private Personal Information to an Unauthorized Actor vulnerabilityCVE-2026-25699 · GHSA-W754-5646-XQ9J github.com/apache/answergithub.com/apache/incubator-answer Go Medium Fix reported
Apache Answer has an Unrestricted Upload of File with Dangerous Type vulnerabilityCVE-2026-33582 · GHSA-V553-G2W6-295P github.com/apache/answergithub.com/apache/incubator-answer Go Medium Fix reported
Apache Answer User Using External Images Potentially Discloses User InformationCVE-2025-29868 · GHSA-WQCC-MFHW-53PCVersion ranges need review. github.com/apache/answer Go Low Fix reported
Apache Answer Exposure of Private Personal Information to an Unauthorized Actor vulnerabilityCVE-2026-24735 · GHSA-5W5R-8XC6-2XHWVersion ranges need review. github.com/apache/answer Go Medium Fix reported