Go/github.com/apache/incubator-answer CVE-2026-25699: medium 6.1, EPSS 0.41%
Apache Answer has an Exposure of Private Personal Information to an Unauthorized Actor vulnerability
Action: Upgrade github.com/apache/incubator-answer to 1.7.2-0.20260206073245-92994b49976b or later.
go get github.com/apache/incubator-answer@v1.7.2-0.20260206073245-92994b49976bAffected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.7.2-0.20260206073245-92994b49976b | - |
Fixed versions
| 1.7.2-0.20260206073245-92994b49976b |
Sources
- osv: GHSA-w754-5646-xq9j
- https://nvd.nist.gov/vuln/detail/CVE-2026-25699
- https://github.com/apache/answer/commit/92994b49976b6206a7000d045d924ec4fd5be1be
- https://github.com/apache/answer
- https://github.com/apache/answer/releases/tag/v2.0.1
- https://lists.apache.org/thread/c36k4hzwhncqo0qfn5fg57f1gkjhyfv8
- http://www.openwall.com/lists/oss-security/2026/06/09/6
CVE-2026-25699 · published · modified · JSON