You are viewing a plain text version of this content. The canonical link for it is here.
- CVE-2026-48834: Apache Answer: Denial of service via crafted Accept-Language header parsing - posted by Enxin Xie <li...@apache.org> on 2026/08/05 14:25:42 UTC, 0 replies.
- CVE-2026-48911: Apache Answer: Unauthenticated OAuth Email-Binding Account Takeover via Existing User Confirmation Flow - posted by Enxin Xie <li...@apache.org> on 2026/08/05 14:26:04 UTC, 0 replies.
- CVE-2026-48912: Apache Answer: Improper authorization in avatar update cleanup allows authenticated users to delete arbitrary uploaded files by URL - posted by Enxin Xie <li...@apache.org> on 2026/08/05 14:26:28 UTC, 0 replies.
- CVE-2026-50749: Apache Answer: Missing authorization in revision audit reject allows authenticated users to reject pending revisions - posted by Enxin Xie <li...@apache.org> on 2026/08/05 14:26:49 UTC, 0 replies.
- CVE-2026-60023: Apache Answer: Unauthorized disclosure of deleted or pending answer content - posted by Enxin Xie <li...@apache.org> on 2026/08/05 14:27:08 UTC, 0 replies.
- CVE-2026-60053: Apache Answer: Residual Administrative API Key Access After Role or Account Revocation - posted by Enxin Xie <li...@apache.org> on 2026/08/05 14:27:26 UTC, 0 replies.
- [DISCUSS]Should we release a new version? - posted by mingcheng <mi...@apache.org> on 2026/08/13 14:50:30 UTC, 2 replies.