CVE-2026-25688
2 advisories.
Go/github.com/apache/incubator-answer CVE-2026-25688: medium 6.1, EPSS 0.57%
Apache Answer has an Improper Neutralization of Alternate XSS Syntax vulnerability
Action: Upgrade github.com/apache/incubator-answer to 1.7.2-0.20260525024654-2746bf5b455f or later.
go get github.com/apache/incubator-answer@v1.7.2-0.20260525024654-2746bf5b455fAffected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.7.2-0.20260525024654-2746bf5b455f | - |
Fixed versions
| 1.7.2-0.20260525024654-2746bf5b455f |
Sources
- osv: GHSA-hmr2-99jm-8x45
- https://nvd.nist.gov/vuln/detail/CVE-2026-25688
- https://github.com/apache/answer
- https://lists.apache.org/thread/x42joj43rqb38ms5q60f7bgq3qbo7t5q
- http://www.openwall.com/lists/oss-security/2026/06/09/7
CVE-2026-25688 · published · modified · JSON
Go/github.com/apache/answer CVE-2026-25688: unknown, EPSS 0.57%
Apache Answer has an Improper Neutralization of Alternate XSS Syntax vulnerability in github.com/apache/answer
Action: Upgrade github.com/apache/answer to 1.7.2-0.20260525024654-2746bf5b455f or later.
go get github.com/apache/answer@v1.7.2-0.20260525024654-2746bf5b455fAffected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.7.2-0.20260525024654-2746bf5b455f | - |
Fixed versions
| 1.7.2-0.20260525024654-2746bf5b455f |
Sources
- osv: GO-2026-6147
- https://github.com/advisories/GHSA-hmr2-99jm-8x45
- https://nvd.nist.gov/vuln/detail/CVE-2026-25688
- http://www.openwall.com/lists/oss-security/2026/06/09/7
- https://lists.apache.org/thread/x42joj43rqb38ms5q60f7bgq3qbo7t5q
CVE-2026-25688 · published · modified · JSON