Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 00:25:51 +0000 cnvd-2024-35662 https://cve.radiocsirt.org/vuln/cnvd-2024-35662 cnvd-2024-35662 https://cve.radiocsirt.org/vuln/cnvd-2024-35662 EUVD-2026-222647 https://cve.radiocsirt.org/vuln/euvd-2026-222647 EUVD-2026-222647 https://cve.radiocsirt.org/vuln/euvd-2026-222647 fkie_cve-2024-41888 https://cve.radiocsirt.org/vuln/fkie_cve-2024-41888 <p>Missing Release of Resource after Effective Lifetime vulnerability in Apache Answer.</p> <p>This issue affects Apache Answer: through 1.3.5.</p> <p>The password reset link remains valid within its expiration period even after it has been used. This could potentially lead to the link being misused or hijacked. Users are recommended to upgrade to version 1.3.6, which fixes the issue.</p> <p>Missing Release of Resource after Effective Lifetime vulnerability in Apache Answer.</p> <p>This issue affects Apache Answer: through 1.3.5.</p> <p>The password reset link remains valid within its expiration period even after it has been used. This could potentially lead to the link being misused or hijacked. Users are recommended to upgrade to version 1.3.6, which fixes the issue.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-41888 GHSA-v3x9-wrq5-868j — Apache Answer: The link for resetting user password is not Single-Use https://cve.radiocsirt.org/vuln/ghsa-v3x9-wrq5-868j <p><strong>Affected:</strong> Go: github.com/apache/incubator-answer</p> <p>Missing Release of Resource after Effective Lifetime vulnerability in Apache Answer.</p> <p>This issue affects Apache Answer: through 1.3.5.</p> <p>The password reset link remains valid within its expiration period even after it has been used. This could potentially lead to the link being misused or hijacked. Users are recommended to upgrade to version 1.3.6, which fixes the issue.</p> <p><strong>Affected:</strong> Go: github.com/apache/incubator-answer</p> <p>Missing Release of Resource after Effective Lifetime vulnerability in Apache Answer.</p> <p>This issue affects Apache Answer: through 1.3.5.</p> <p>The password reset link remains valid within its expiration period even after it has been used. This could potentially lead to the link being misused or hijacked. Users are recommended to upgrade to version 1.3.6, which fixes the issue.</p> https://cve.radiocsirt.org/vuln/ghsa-v3x9-wrq5-868j