You are viewing a plain text version of this content. The canonical link for it is here.
- AW: Re: Using AI for translation? - posted by Christofer Dutz via dev <de...@answer.apache.org> on 2026/10/07 18:00:38 UTC, 1 replies.
- Re: [VOTE] Release Apache Answer v2.0.3-RC1 - posted by Shuailing LI <sh...@apache.org> on 2026/10/08 07:00:33 UTC, 3 replies.
- [RESULT][VOTE] Release Apache Answer v2.0.3-RC1 - posted by LinkinStar <li...@apache.org> on 2026/10/08 09:38:19 UTC, 0 replies.
- [ANNOUNCE] Apache Answer v2.0.3 available - posted by LinkinStar <li...@apache.org> on 2026/10/09 03:48:48 UTC, 0 replies.
- CVE-2026-64943: Apache Answer: API keys logged in plaintext during authentication - posted by Enxin Xie <li...@apache.org> on 2026/10/16 03:30:52 UTC, 0 replies.
- CVE-2026-64944: Apache Answer: Stored XSS via unsanitized HTML in imported question content - posted by Enxin Xie <li...@apache.org> on 2026/10/16 03:31:32 UTC, 0 replies.
- CVE-2026-64945: Apache Answer: Incorrect permission mapping allows users with only the unpin permission to hide/show questions - posted by Enxin Xie <li...@apache.org> on 2026/10/16 03:32:02 UTC, 0 replies.
- CVE-2026-67249: Apache Answer: Email Code Purpose Confusion May Allow Account Takeover - posted by Enxin Xie <li...@apache.org> on 2026/10/16 03:33:18 UTC, 0 replies.
- CVE-2026-68482: Apache Answer: Improper Authorization in Question Invite User Lookup - posted by Enxin Xie <li...@apache.org> on 2026/10/16 03:33:51 UTC, 0 replies.
- CVE-2026-71563: Apache Answer: MCP Answer Retrieval Exposes Content from Non-Public Questions - posted by Enxin Xie <li...@apache.org> on 2026/10/16 03:34:36 UTC, 0 replies.
- CVE-2026-76994: Apache Answer: Exposure of Hidden Question Metadata Through Public Answer Profiles - posted by Enxin Xie <li...@apache.org> on 2026/10/16 03:35:21 UTC, 0 replies.
- CVE-2026-79613: Apache Answer: Disclosure of Comments on Non-Public Content Through Public Profiles - posted by Enxin Xie <li...@apache.org> on 2026/10/16 03:35:48 UTC, 0 replies.
- CVE-2026-79620: Apache Answer: Improper Authorization Allows Disclosure of Non-Public Question Metadata - posted by Enxin Xie <li...@apache.org> on 2026/10/16 03:36:42 UTC, 0 replies.
- CVE-2026-79624: Apache Answer: Stale Visit Tokens Retain Access to Private Uploads After Session Revocation - posted by Enxin Xie <li...@apache.org> on 2026/10/16 03:37:21 UTC, 0 replies.
- CVE-2026-79633: Apache Answer: Missing Authorization Allows Mutations of Non-Public Content - posted by Enxin Xie <li...@apache.org> on 2026/10/16 03:37:51 UTC, 0 replies.
- CVE-2026-86589: Apache Answer: User Center integration does not revoke first-login sessions after central account suspension - posted by Enxin Xie <li...@apache.org> on 2026/10/16 03:38:38 UTC, 0 replies.
- CVE-2026-90910: Apache Answer: Reaction API authorization bypass for restricted content - posted by Enxin Xie <li...@apache.org> on 2026/10/16 03:39:03 UTC, 0 replies.