NewA calmer, faster ZeroHour — security assessments on articles, story timelines and search from any page.

#oss

0 stories this week · 2 this month · 2 in 6 months · mostly security

Stories per day · 30 days

Relatedapache-answer2 api-keys1 credential-leak1 cve-2026-649431 cve-2026-649441 input-sanitization1 logging1 stored-xss1 xss1

2 stories, newest first · one card per story

oss-security14d ago

CVE-2026-64944: Apache Answer: Stored XSS via unsanitized HTML in imported question content

Apache Answer through 2.0.2 stores imported question HTML unsanitized, enabling stored cross-site scripting.

3 sources apache-answer xss

2

oss-security14d ago

CVE-2026-64943: Apache Answer: API keys logged in plaintext during authentication

Apache Answer through 2.0.2 logs full API keys in plaintext; 2.0.3 stops the leak.

2 sources apache-answer api-keys

1