Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 22:02:58 +0000 cnvd-2024-35661 https://cve.radiocsirt.org/vuln/cnvd-2024-35661 cnvd-2024-35661 https://cve.radiocsirt.org/vuln/cnvd-2024-35661 EUVD-2026-222571 https://cve.radiocsirt.org/vuln/euvd-2026-222571 EUVD-2026-222571 https://cve.radiocsirt.org/vuln/euvd-2026-222571 fkie_cve-2024-41890 https://cve.radiocsirt.org/vuln/fkie_cve-2024-41890 <p>Missing Release of Resource after Effective Lifetime vulnerability in Apache Answer.</p> <p>This issue affects Apache Answer: through 1.3.5.</p> <p>User sends multiple password reset emails, each containing a valid link. Within the link&#39;s validity period, this could potentially lead to the link being misused or hijacked. Users are recommended to upgrade to version 1.3.6, which fixes the issue.</p> <p>Missing Release of Resource after Effective Lifetime vulnerability in Apache Answer.</p> <p>This issue affects Apache Answer: through 1.3.5.</p> <p>User sends multiple password reset emails, each containing a valid link. Within the link&#39;s validity period, this could potentially lead to the link being misused or hijacked. Users are recommended to upgrade to version 1.3.6, which fixes the issue.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-41890 GHSA-gvpv-r32v-9737 — Apache Answer: The link to reset the user's password will remain valid after sending a new link https://cve.radiocsirt.org/vuln/ghsa-gvpv-r32v-9737 <p><strong>Affected:</strong> Go: github.com/apache/incubator-answer</p> <p>Missing Release of Resource after Effective Lifetime vulnerability in Apache Answer.</p> <p>This issue affects Apache Answer: through 1.3.5.</p> <p>User sends multiple password reset emails, each containing a valid link. Within the link&#39;s validity period, this could potentially lead to the link being misused or hijacked. Users are recommended to upgrade to version 1.3.6, which fixes the issue.</p> <p><strong>Affected:</strong> Go: github.com/apache/incubator-answer</p> <p>Missing Release of Resource after Effective Lifetime vulnerability in Apache Answer.</p> <p>This issue affects Apache Answer: through 1.3.5.</p> <p>User sends multiple password reset emails, each containing a valid link. Within the link&#39;s validity period, this could potentially lead to the link being misused or hijacked. Users are recommended to upgrade to version 1.3.6, which fixes the issue.</p> https://cve.radiocsirt.org/vuln/ghsa-gvpv-r32v-9737