https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T22:58:04.661455+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2024-35662 cnvd-2024-35662 2026-10-06T22:58:04.726839+00:00 cnvd-2024-35662 https://cve.radiocsirt.org/vuln/euvd-2026-222647 EUVD-2026-222647 2026-10-06T22:58:04.726883+00:00 EUVD-2026-222647 https://cve.radiocsirt.org/vuln/fkie_cve-2024-41888 fkie_cve-2024-41888 2026-10-06T22:58:04.726898+00:00

Missing Release of Resource after Effective Lifetime vulnerability in Apache Answer.

This issue affects Apache Answer: through 1.3.5.

The password reset link remains valid within its expiration period even after it has been used. This could potentially lead to the link being misused or hijacked. Users are recommended to upgrade to version 1.3.6, which fixes the issue.

 https://cve.radiocsirt.org/vuln/ghsa-v3x9-wrq5-868j GHSA-v3x9-wrq5-868j — Apache Answer: The link for resetting user password is not Single-Use 2026-10-06T22:58:04.726933+00:00

Affected: Go: github.com/apache/incubator-answer

Missing Release of Resource after Effective Lifetime vulnerability in Apache Answer.

This issue affects Apache Answer: through 1.3.5.

The password reset link remains valid within its expiration period even after it has been used. This could potentially lead to the link being misused or hijacked. Users are recommended to upgrade to version 1.3.6, which fixes the issue.