CRITICAL9.8Go
GHSA-4cwh-8w4g-jxxh· CVE-2023-0744, GO-2023-1550Answer contains Improper Access Control vulnerability
Modified: 8/20/2024
package
Go/github.com/answerdev/answer
pkg:go/github.com/answerdev/answer
MEDIUM6.5Go
GHSA-52h8-c876-989c· CVE-2023-4127, GO-2023-1995Answer has Race Condition within a Thread
Modified: 8/20/2024
MEDIUM5.4Go
GHSA-55vm-3vq3-4jpc· CVE-2023-1240, GO-2023-1613Answer vulnerable to Cross-site Scripting
Modified: 8/20/2024
MEDIUM5.4Go
GHSA-5w78-v688-cx9q· CVE-2023-1238, GO-2023-1614Answer vulnerable to Cross-site Scripting
Modified: 8/20/2024
CRITICAL9.0Go
GHSA-65px-4cpf-697r· CVE-2023-0740, GO-2023-1541Cross-site scripting vulnerability found in answerdev/answer
Modified: 8/20/2024
MEDIUM6.5Go
GHSA-65v8-6pvw-jwvq· CVE-2023-1975, GO-2023-1716Answer vulnerable to Insertion of Sensitive Information Into Sent Data
Modified: 8/20/2024
MEDIUM5.4Go
GHSA-6c32-3x46-m9rh· CVE-2023-1245, GO-2023-1612Answer vulnerable to Cross-site Scripting
Modified: 8/20/2024
MEDIUM5.4Go
GHSA-6cvf-m58q-h9wf· CVE-2023-0934, GO-2023-1592Answer vulnerable to Cross-site Scripting
Modified: 8/20/2024
MEDIUM5.3Go
GHSA-6x5v-cxpp-pc5x· CVE-2023-1540, GO-2023-1654Answer has Observable Response Discrepancy
Modified: 8/20/2024
HIGH8.8Go
GHSA-79hx-g43v-xfmr· CVE-2023-1543, GO-2023-1655Answer vulnerable to Insufficient Session Expiration
Modified: 8/20/2024
MEDIUM5.4Go
GHSA-83qr-c7m9-wmgw· CVE-2023-1535, GO-2023-1656Answer vulnerable to Stored Cross-site Scripting
Modified: 8/20/2024
MEDIUM6.5Go
GHSA-8jg3-rx43-3fv4· CVE-2023-1974, GO-2023-1718Answer vulnerable to Exposure of Sensitive Information Through Metadata
Modified: 8/20/2024
MEDIUM4.8Go
GHSA-8jh8-33f5-cgfp· CVE-2023-1243, GO-2023-1615Answer vulnerable to Cross-site Scripting
Modified: 8/20/2024
MEDIUM5.4Go
GHSA-9v4v-9fj5-p982· CVE-2023-1237, GO-2023-1616Answer vulnerable to Cross-site Scripting
Modified: 8/20/2024
MEDIUM5.4Go
GHSA-ff27-hrmr-ggpj· CVE-2023-1241, GO-2023-1617Answer vulnerable to Cross-site Scripting
Modified: 8/20/2024
MEDIUM5.3Go
GHSA-g44v-6qfm-f6ch· CVE-2023-1539, GO-2023-1657Answer has Guessable CAPTCHA
Modified: 8/20/2024
MEDIUM4.1Go
GHSA-ggcf-hwxp-rc77· CVE-2023-4126, GO-2023-1996Answer Insufficient Session Expiration vulnerability
Modified: 8/20/2024
LOW3.8Go
GHSA-h2wg-83fc-xvm9· CVE-2023-1541, GO-2023-1658Answer vulnerable to Business Logic Errors
Modified: 8/20/2024
MEDIUM5.4Go
GHSA-h85v-cx5m-78wj· CVE-2023-1244, GO-2023-1618Answer vulnerable to Cross-site Scripting
Modified: 8/20/2024
CRITICAL9.0Go
GHSA-hjmr-xm25-36mh· CVE-2023-0743, GO-2023-1551Answer subject to Cross-site Scripting vulnerability
Modified: 8/20/2024
CRITICAL9.8Go
GHSA-hwj7-frgj-7829· CVE-2023-1537, GO-2023-1659Answer vulnerable to Authentication Bypass by Capture-replay
Modified: 8/20/2024
HIGH8.8Go
GHSA-j63x-f657-2m9g· CVE-2023-4125, GO-2023-2001Answer has Weak Password Requirements
Modified: 8/21/2024
HIGH8.8Go
GHSA-j97g-77fj-9c4p· CVE-2023-1976, GO-2023-1719Answer vulnerable to account takeover because password reset links do not expire
Modified: 8/20/2024
CRITICAL9.0Go
GHSA-p7wj-c85f-xq9h· CVE-2023-0741, GO-2023-1552Answer has Cross-site Scripting vulnerability
Modified: 8/20/2024
HIGH8.3Go
GHSA-pj2h-85jq-g5vg· CVE-2023-4815, GO-2023-2051Answer Missing Authentication for Critical Function
Modified: 8/21/2024
LOW3.5Go
GHSA-qmqw-r4x6-3w2q· CVE-2023-2590, GO-2023-1774Answer Missing Authorization vulnerability
Modified: 8/20/2024
MEDIUM5.4Go
GHSA-qrwm-xqfr-4vhv· CVE-2023-1242, GO-2023-1619Answer vulnerable to Cross-site Scripting
Modified: 8/20/2024
MEDIUM6.8Go
GHSA-qx34-47fc-vv79· CVE-2023-0739, GO-2023-1553Answer vulnerable to Race Condition
Modified: 8/20/2024
MEDIUM5.4Go
GHSA-r95w-7cpx-h5mx· CVE-2023-1542, GO-2023-1660Answer vulnerable to Business Logic Errors
Modified: 8/20/2024
CRITICAL9.0Go
GHSA-rmw8-7823-wp7f· CVE-2023-0742, GO-2023-1554Answer contains Cross-site Scripting vulnerability
Modified: 8/20/2024
MEDIUM5.3Go
GHSA-rvjp-8qj4-8p29· CVE-2023-1538, GO-2023-1661Answer has Observable Timing Discrepancy
Modified: 8/20/2024
HIGH8.1Go
GHSA-v9vc-7x69-c2x8· CVE-2023-4124, GO-2023-1997Answer Missing Authorization vulnerability
Modified: 8/21/2024
MEDIUM4.8Go
GHSA-vxhr-p2vp-7gf8· CVE-2023-1239, GO-2023-1620Answer vulnerable to Cross-site Scripting
Modified: 8/20/2024
MEDIUM5.4Go
GHSA-xvfj-84vc-hrmf· CVE-2023-1536, GO-2023-1662Answer vulnerable to Stored Cross-site Scripting
Modified: 8/20/2024
—Go
GO-2023-1541· CVE-2023-0740, GHSA-65px-4cpf-697rCross-site scripting vulnerability found in answerdev/answer in github.com/answerdev/answer
Modified: 3/3/2026
—Go
GO-2023-1550· CVE-2023-0744, GHSA-4cwh-8w4g-jxxhAnswer contains Improper Access Control vulnerability in github.com/answerdev/answer
Modified: 3/3/2026
—Go
GO-2023-1551· CVE-2023-0743, GHSA-hjmr-xm25-36mhAnswer subject to Cross-site Scripting vulnerability in github.com/answerdev/answer
Modified: 3/3/2026
—Go
GO-2023-1552· CVE-2023-0741, GHSA-p7wj-c85f-xq9hAnswer has Cross-site Scripting vulnerability in github.com/answerdev/answer
Modified: 3/3/2026
—Go
GO-2023-1553· CVE-2023-0739, GHSA-qx34-47fc-vv79Answer vulnerable to Race Condition in github.com/answerdev/answer
Modified: 3/3/2026
—Go
GO-2023-1554· CVE-2023-0742, GHSA-rmw8-7823-wp7fAnswer contains Cross-site Scripting vulnerability in github.com/answerdev/answer
Modified: 3/3/2026
—Go
GO-2023-1592· CVE-2023-0934, GHSA-6cvf-m58q-h9wfAnswer vulnerable to Cross-site Scripting in github.com/answerdev/answer
Modified: 3/3/2026
—Go
GO-2023-1612· CVE-2023-1245, GHSA-6c32-3x46-m9rhAnswer vulnerable to Cross-site Scripting in github.com/answerdev/answer
Modified: 3/3/2026
—Go
GO-2023-1613· CVE-2023-1240, GHSA-55vm-3vq3-4jpcAnswer vulnerable to Cross-site Scripting in github.com/answerdev/answer
Modified: 3/3/2026
—Go
GO-2023-1614· CVE-2023-1238, GHSA-5w78-v688-cx9qAnswer vulnerable to Cross-site Scripting in github.com/answerdev/answer
Modified: 3/3/2026
—Go
GO-2023-1615· CVE-2023-1243, GHSA-8jh8-33f5-cgfpAnswer vulnerable to Cross-site Scripting in github.com/answerdev/answer
Modified: 3/3/2026
—Go
GO-2023-1616· CVE-2023-1237, GHSA-9v4v-9fj5-p982Answer vulnerable to Cross-site Scripting in github.com/answerdev/answer
Modified: 3/3/2026
—Go
GO-2023-1617· CVE-2023-1241, GHSA-ff27-hrmr-ggpjAnswer vulnerable to Cross-site Scripting in github.com/answerdev/answer
Modified: 3/3/2026
—Go
GO-2023-1618· CVE-2023-1244, GHSA-h85v-cx5m-78wjAnswer vulnerable to Cross-site Scripting in github.com/answerdev/answer
Modified: 3/3/2026
—Go
GO-2023-1619· CVE-2023-1242, GHSA-qrwm-xqfr-4vhvAnswer vulnerable to Cross-site Scripting in github.com/answerdev/answer
Modified: 3/3/2026
—Go
GO-2023-1620· CVE-2023-1239, GHSA-vxhr-p2vp-7gf8Answer vulnerable to Cross-site Scripting in github.com/answerdev/answer
Modified: 3/3/2026
—Go
GO-2023-1654· CVE-2023-1540, GHSA-6x5v-cxpp-pc5xAnswer has Observable Response Discrepancy in github.com/answerdev/answer
Modified: 3/3/2026
—Go
GO-2023-1655· CVE-2023-1543, GHSA-79hx-g43v-xfmrAnswer vulnerable to Insufficient Session Expiration in github.com/answerdev/answer
Modified: 3/3/2026
—Go
GO-2023-1656· CVE-2023-1535, GHSA-83qr-c7m9-wmgwAnswer vulnerable to Stored Cross-site Scripting in github.com/answerdev/answer
Modified: 3/3/2026
—Go
GO-2023-1657· CVE-2023-1539, GHSA-g44v-6qfm-f6chAnswer has Guessable CAPTCHA in github.com/answerdev/answer
Modified: 3/3/2026
—Go
GO-2023-1658· CVE-2023-1541, GHSA-h2wg-83fc-xvm9Answer vulnerable to Business Logic Errors in github.com/answerdev/answer
Modified: 3/3/2026
—Go
GO-2023-1659· CVE-2023-1537, GHSA-hwj7-frgj-7829Answer vulnerable to Authentication Bypass by Capture-replay in github.com/answerdev/answer
Modified: 3/3/2026
—Go
GO-2023-1660· CVE-2023-1542, GHSA-r95w-7cpx-h5mxAnswer vulnerable to Business Logic Errors in github.com/answerdev/answer
Modified: 3/3/2026
—Go
GO-2023-1661· CVE-2023-1538, GHSA-rvjp-8qj4-8p29Answer has Observable Timing Discrepancy in github.com/answerdev/answer
Modified: 3/3/2026
—Go
GO-2023-1662· CVE-2023-1536, GHSA-xvfj-84vc-hrmfAnswer vulnerable to Stored Cross-site Scripting in github.com/answerdev/answer
Modified: 3/3/2026
—Go
GO-2023-1716· CVE-2023-1975, GHSA-65v8-6pvw-jwvqAnswer vulnerable to Insertion of Sensitive Information Into Sent Data in github.com/answerdev/answer
Modified: 3/3/2026
—Go
GO-2023-1718· CVE-2023-1974, GHSA-8jg3-rx43-3fv4Answer vulnerable to Exposure of Sensitive Information Through Metadata in github.com/answerdev/answer
Modified: 3/3/2026
—Go
GO-2023-1719· CVE-2023-1976, GHSA-j97g-77fj-9c4pAnswer vulnerable to account takeover because password reset links do not expire in github.com/answerdev/answer
Modified: 3/3/2026
—Go
GO-2023-1774· CVE-2023-2590, GHSA-qmqw-r4x6-3w2qAnswer Missing Authorization vulnerability in github.com/answerdev/answer
Modified: 3/3/2026
—Go
GO-2023-1995· CVE-2023-4127, GHSA-52h8-c876-989cAnswer has Race Condition within a Thread in github.com/answerdev/answer
Modified: 3/3/2026
—Go
GO-2023-1996· CVE-2023-4126, GHSA-ggcf-hwxp-rc77Answer Insufficient Session Expiration vulnerability in github.com/answerdev/answer
Modified: 3/3/2026
—Go
GO-2023-1997· CVE-2023-4124, GHSA-v9vc-7x69-c2x8Answer Missing Authorization vulnerability in github.com/answerdev/answer
Modified: 3/3/2026
—Go
GO-2023-2001· CVE-2023-4125, GHSA-j63x-f657-2m9gAnswer has Weak Password Requirements in github.com/answerdev/answer
Modified: 3/3/2026
—Go
GO-2023-2051· CVE-2023-4815, GHSA-pj2h-85jq-g5vgAnswer Missing Authentication for Critical Function in github.com/answerdev/answer
Modified: 3/3/2026