HIGH7.2Go
GHSA-4gw2-vg4x-7p29· CVE-2026-25700, GO-2026-6249Apache Answer: AdminToken not invalidated after admin deactivation
Modified: 8/18/2026
package
Go/github.com/apache/answer
pkg:go/github.com/apache/answer
HIGH7.5Go
GHSA-5w5r-8xc6-2xhw· CVE-2026-24735, GO-2026-4421Apache Answer Exposure of Private Personal Information to an Unauthorized Actor vulnerability
Modified: 2/5/2026
MEDIUM6.5Go
GHSA-wqcc-mfhw-53pc· CVE-2025-29868, GO-2025-3587Apache Answer User Using External Images Potentially Discloses User Information
Modified: 4/10/2025
—Go
GO-2025-3587· CVE-2025-29868, GHSA-wqcc-mfhw-53pcApache Answer User Using External Images Potentially Discloses User Information in github.com/apache/answer
Modified: 3/3/2026
—Go
GO-2026-4421· CVE-2026-24735, GHSA-5w5r-8xc6-2xhwApache Answer Exposure of Private Personal Information to an Unauthorized Actor vulnerability in github.com/apache/answer
Modified: 2/5/2026
—Go
GO-2026-6147· CVE-2026-25688, GHSA-hmr2-99jm-8x45Apache Answer has an Improper Neutralization of Alternate XSS Syntax vulnerability in github.com/apache/answer
Modified: 8/18/2026
—Go
GO-2026-6148· CVE-2026-25699, GHSA-w754-5646-xq9jApache Answer has an Exposure of Private Personal Information to an Unauthorized Actor vulnerability in github.com/apache/answer
Modified: 8/18/2026
—Go
GO-2026-6151· CVE-2026-34033, GHSA-6qwm-5fm9-cvjxApache Answer vulnerable to Cross-site Scripting in github.com/apache/answer
Modified: 8/18/2026
—Go
GO-2026-6152· CVE-2026-34905, GHSA-85r2-pvg8-89r9Apache Answer has an Exposure of Sensitive Information to an Unauthorized Actor vulnerability in github.com/apache/answer
Modified: 8/18/2026
—Go
GO-2026-6153· CVE-2026-33582, GHSA-v553-g2w6-295pApache Answer has an Unrestricted Upload of File with Dangerous Type vulnerability in github.com/apache/answer
Modified: 8/18/2026
—Go
GO-2026-6154· CVE-2026-34031, GHSA-x4f6-mqg6-28xxApache Answer has an Unrestricted Upload of File with Dangerous Type vulnerability in github.com/apache/answer
Modified: 8/18/2026
—Go
GO-2026-6249· CVE-2026-25700, GHSA-4gw2-vg4x-7p29Apache Answer: AdminToken not invalidated after admin deactivation in github.com/apache/answer
Modified: 8/18/2026