Where
-Infinity
0

Trending

Last week
Last month
Last year

Versions

1.2.1
2
1.4.2
1

Apache AnswerApache Answer: AdminToken not invalidated after admin deactivation

Risk 70
Severity
7.2
First published (updated )
CVE-2026-25700

oss-secCVE-2026-25700: Apache Answer: AdminToken not invalidated after admin deactivation

First published (updated )
https://seclists.org/oss-sec/2026/q2/871

Apache AnswerApache Answer: XSS in AI Answer Rendering

Risk 40
Severity
6.1
First published (updated )
CVE-2026-25688

Apache AnswerApache Answer: Authorization Bypass in Timeline API

Risk 40
Severity
6.1
First published (updated )
CVE-2026-25699

Apache AnswerApache Answer: Uploading specially crafted TIFF files causes an Out-of-Memory error

Risk 40
Severity
6.5
First published (updated )
CVE-2026-33582
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Apache AnswerApache Answer: The custom avatar was not properly validated

Risk 42
Severity
6.5
First published (updated )
CVE-2026-34031

Apache AnswerApache Answer: HTML Content Injection in Email

Risk 36
Severity
5.4
First published (updated )
CVE-2026-34033

Apache AnswerApache Answer: Unlisted Questions Accessible via Direct API Access

Risk 40
Severity
6.5
First published (updated )
CVE-2026-34905

oss-secCVE-2026-25699: Apache Answer: Authorization Bypass in Timeline API

First published (updated )
https://seclists.org/oss-sec/2026/q2/852

oss-secCVE-2026-33582: Apache Answer: Uploading specially crafted TIFF files causes an Out-of-Memory error

First published (updated )
https://seclists.org/oss-sec/2026/q2/851
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

oss-secCVE-2026-34033: Apache Answer: HTML Content Injection in Email

First published (updated )
https://seclists.org/oss-sec/2026/q2/849

oss-secCVE-2026-34905: Apache Answer: Unlisted Questions Accessible via Dict API Access

First published (updated )
https://seclists.org/oss-sec/2026/q2/848

Apache AnswerApache Answer: Revision API Improper Access Control leads to Information Disclosure

Risk 32
Severity
7.5
EPSS
0.02%
First published (updated )
CVE-2026-24735

oss-secCVE-2026-24735: Apache Answer: vision API Improper Access Control leads to Information Disclosu

First published (updated )
https://seclists.org/oss-sec/2026/q1/143

CVE-2025-29868: Apache Answer: Using externally fenced images can leak user privacy.

First published (updated )
https://seclists.org/oss-sec/2025/q2/4
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Apache AnswerApache Answer: Using externally referenced images can leak user privacy.

Risk 29
Severity
6.5
EPSS
0.03%
First published (updated )
CVE-2025-29868

CVE-2025-29868: Apache Answer: Using externally fenced images can leak user privacy.

First published (updated )
https://seclists.org/oss-sec/2025/q1/261

CVE-2024-45719: Apache Answer: Pdictable Authorization Token Using UUIDv1

First published (updated )
https://seclists.org/oss-sec/2024/q4/111

CVE-2024-40761: Apache Answer: Avatar URL leaked user email addsses

First published (updated )
https://seclists.org/oss-sec/2024/q3/288

CVE-2024-40761: Apache Answer: Avatar URL leaked user email addsses

First published (updated )
https://seclists.org/oss-sec/2024/q3/279
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

CVE-2024-40761: Apache Answer: Avatar URL leaked user email addsses

First published (updated )
https://seclists.org/oss-sec/2024/q3/270

go/github.com/apache/incubator-answerApache Answer: The link for resetting user password is not Single-Use

Risk 29
Severity
5.3
First published (updated )
CVE-2024-41888

Apache AnswerApache Answer: The link to reset the user's password will remain valid after sending a new link

Risk 29
Severity
5.3
First published (updated )
CVE-2024-41890

CVE-2024-41888: Apache Answer: The link for setting user password is not Single-Use

First published (updated )
https://seclists.org/oss-sec/2024/q3/186

CVE-2024-41890: Apache Answer: The link to set the user's password will main valid after sending a new link

First published (updated )
https://seclists.org/oss-sec/2024/q3/185
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

go/github.com/apache/incubator-answerApache Answer: Pixel Flood Attack by uploading the large pixel file

Risk 48
Severity
9.1
EPSS
0.04%
First published (updated )
CVE-2024-22393

go/github.com/apache/incubator-answerApache Answer: XSS vulnerability when submitting summary

Risk 26
Severity
5.4
EPSS
0.04%
First published (updated )
CVE-2024-23349

go/github.com/apache/incubator-answerApache Answer: Repeated submission at registration created duplicate users with the same name

Risk 27
Severity
5.9
EPSS
0.04%
First published (updated )
CVE-2024-26578

CVE-2024-26578: Apache Answer: Repeated submission at registration created duplicate users with the same name

First published (updated )
https://seclists.org/oss-sec/2024/q1/154

CVE-2024-23349: Apache Answer: XSS vulnerability when submitting summary

First published (updated )
https://seclists.org/oss-sec/2024/q1/153
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203