https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T02:39:36.756931+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-325894 EUVD-2026-325894 2026-10-07T02:39:36.808416+00:00 EUVD-2026-325894 https://cve.radiocsirt.org/vuln/fkie_cve-2026-34031 fkie_cve-2026-34031 2026-10-07T02:39:36.808455+00:00

Unrestricted Upload of File with Dangerous Type vulnerability in Apache Answer.

This issue affects Apache Answer: through 2.0.0.

The server did not sufficiently validate user-supplied image URLs, allowing arbitrary external content to be embedded as profile images, which could expose users to unintended external requests and tracking by third-party servers. Users are recommended to upgrade to version 2.0.1, which fixes the issue.

 https://cve.radiocsirt.org/vuln/ghsa-x4f6-mqg6-28xx GHSA-x4f6-mqg6-28xx — Apache Answer has an Unrestricted Upload of File with Dangerous Type vulnerability 2026-10-07T02:39:36.808493+00:00

Affected: Go: github.com/apache/incubator-answer

Unrestricted Upload of File with Dangerous Type vulnerability in Apache Answer.

This issue affects Apache Answer: through 2.0.0.

The server did not sufficiently validate user-supplied image URLs, allowing arbitrary external content to be embedded as profile images, which could expose users to unintended external requests and tracking by third-party servers. Users are recommended to upgrade to version 2.0.1, which fixes the issue.