MEDIUM5.3Go
GHSA-48cr-j2cx-mcr8· CVE-2024-40761, GO-2024-3158Apache Answer: Avatar URL leaked user email addresses
Modified: 7/11/2025
package
Go/github.com/apache/incubator-answer
pkg:go/github.com/apache/incubator-answer
HIGH7.2Go
GHSA-4gw2-vg4x-7p29· CVE-2026-25700, GO-2026-6249Apache Answer: AdminToken not invalidated after admin deactivation
Modified: 8/18/2026
MEDIUM5.4Go
GHSA-6qwm-5fm9-cvjx· CVE-2026-34033, GO-2026-6151Apache Answer vulnerable to Cross-site Scripting
Modified: 8/18/2026
MEDIUM6.5Go
GHSA-85r2-pvg8-89r9· CVE-2026-34905, GO-2026-6152Apache Answer has an Exposure of Sensitive Information to an Unauthorized Actor vulnerability
Modified: 8/18/2026
MEDIUM5.4Go
GHSA-8pf2-qj4v-fj64· CVE-2024-23349, GO-2024-2578Apache Answer Cross-site Scripting vulnerability
Modified: 12/11/2024
MEDIUM5.9Go
GHSA-9q24-hwmc-797x· CVE-2024-26578, GO-2024-2580Apache Answer Race Condition vulnerability
Modified: 12/11/2024
MEDIUM5.4Go
GHSA-cvqr-mwh6-2vc6· CVE-2024-29217, GO-2024-2743Apache Answer: XSS vulnerability when changing personal website
Modified: 2/13/2025
LOW3.1Go
GHSA-f899-4mr4-fqpv· CVE-2023-49619, GO-2024-2457Apache Answer Race Condition vulnerability
Modified: 6/28/2024
MEDIUM4.8Go
GHSA-gvpv-r32v-9737· CVE-2024-41890, GO-2024-3064Apache Answer: The link to reset the user's password will remain valid after sending a new link
Modified: 3/13/2025
MEDIUM6.1Go
GHSA-hmr2-99jm-8x45· CVE-2026-25688, GO-2026-6147Apache Answer has an Improper Neutralization of Alternate XSS Syntax vulnerability
Modified: 8/18/2026
LOW2.6Go
GHSA-mr95-vfcf-fx9p· CVE-2024-45719, GO-2024-3287Apache Answer: Predictable Authorization Token Using UUIDv1
Modified: 11/27/2024
MEDIUM6.5Go
GHSA-rmqp-mvv2-54c6· CVE-2024-22393, GO-2024-2579Apache Answer Unrestricted Upload of File with Dangerous Type vulnerability
Modified: 2/13/2025
MEDIUM4.8Go
GHSA-v3x9-wrq5-868j· CVE-2024-41888, GO-2024-3065Apache Answer: The link for resetting user password is not Single-Use
Modified: 3/13/2025
MEDIUM6.5Go
GHSA-v553-g2w6-295p· CVE-2026-33582, GO-2026-6153Apache Answer has an Unrestricted Upload of File with Dangerous Type vulnerability
Modified: 8/18/2026
MEDIUM6.1Go
GHSA-w754-5646-xq9j· CVE-2026-25699, GO-2026-6148Apache Answer has an Exposure of Private Personal Information to an Unauthorized Actor vulnerability
Modified: 8/18/2026
MEDIUM6.5Go
GHSA-x4f6-mqg6-28xx· CVE-2026-34031, GO-2026-6154Apache Answer has an Unrestricted Upload of File with Dangerous Type vulnerability
Modified: 8/18/2026
—Go
GO-2024-2457· CVE-2023-49619, GHSA-f899-4mr4-fqpvApache Answer Race Condition vulnerability in github.com/apache/incubator-answer
Modified: 3/3/2026
—Go
GO-2024-2578· CVE-2024-23349, GHSA-8pf2-qj4v-fj64Apache Answer Cross-site Scripting vulnerability in github.com/apache/incubator-answer
Modified: 3/3/2026
—Go
GO-2024-2579· CVE-2024-22393, GHSA-rmqp-mvv2-54c6Apache Answer Unrestricted Upload of File with Dangerous Type vulnerability in github.com/apache/incubator-answer
Modified: 3/3/2026
—Go
GO-2024-2580· CVE-2024-26578, GHSA-9q24-hwmc-797xApache Answer Race Condition vulnerability in github.com/apache/incubator-answer
Modified: 3/3/2026
—Go
GO-2024-2743· CVE-2024-29217, GHSA-cvqr-mwh6-2vc6XSS vulnerability via personal website in github.com/apache/incubator-answer
Modified: 3/3/2026
—Go
GO-2024-3064· CVE-2024-41890, GHSA-gvpv-r32v-9737Apache Answer: The link to reset the user's password will remain valid after sending a new link in github.com/apache/incubator-answer
Modified: 3/3/2026
—Go
GO-2024-3065· CVE-2024-41888, GHSA-v3x9-wrq5-868jApache Answer: The link for resetting user password is not Single-Use in github.com/apache/incubator-answer
Modified: 3/3/2026
—Go
GO-2024-3158· CVE-2024-40761, GHSA-48cr-j2cx-mcr8Apache Answer: Avatar URL leaked user email addresses in github.com/apache/incubator-answer
Modified: 3/3/2026
—Go
GO-2024-3287· CVE-2024-45719, GHSA-mr95-vfcf-fx9pApache Answer: Predictable Authorization Token Using UUIDv1 in github.com/apache/incubator-answer
Modified: 3/3/2026
—Go
GO-2026-6249· CVE-2026-25700, GHSA-4gw2-vg4x-7p29Apache Answer: AdminToken not invalidated after admin deactivation in github.com/apache/answer
Modified: 8/18/2026