GoPackage

github.com/answerdev/answer

34 known vulnerabilities (2 critical, 18 high, 12 medium, 2 low), with the versions each affects and the releases that fix them.

Latest release: Not known: cve.now hasn't read this package's releases
Newest unaffected release: Not known without release data
Advisories: 34 · 2 critical, 18 high, 12 medium, 2 low

Registry: pkg.go.dev

Advisories 34

CVE-2023-4815High 8.3
Missing Authentication for Critical Function in answerdev/answer
Affected: fixed in 1.1.3.
CVE-2023-4127Medium 6.5
Race Condition within a Thread in answerdev/answer
Affected: fixed in 1.1.1.
CVE-2023-4126Medium 4.1
Insufficient Session Expiration in answerdev/answer
Affected: fixed in 1.1.0.
CVE-2023-4125High 8.8
Weak Password Requirements in answerdev/answer
Affected: fixed in 1.1.0.
CVE-2023-4124High 8.1
Missing Authorization in answerdev/answer
Affected: fixed in 1.1.1.
CVE-2023-2590High 7.7
Missing Authorization in answerdev/answer
Affected: fixed in 1.0.9.
CVE-2023-1976Medium 4.6
Password Aging with Long Expiration in answerdev/answer
Affected: fixed in 1.0.6.
CVE-2023-1975High 7.6
Insertion of Sensitive Information Into Sent Data in answerdev/answer
Affected: fixed in 1.0.8.
CVE-2023-1974High 7.7
Exposure of Sensitive Information Through Metadata in answerdev/answer
Affected: fixed in 1.0.8.
CVE-2023-1543Medium 6.8
Insufficient Session Expiration in answerdev/answer
Affected: fixed in 1.0.6.
CVE-2023-1542High 8.1
Business Logic Errors in answerdev/answer
Affected: fixed in 1.0.6.
CVE-2023-1541Medium 6.0
Business Logic Errors in answerdev/answer
Affected: fixed in 1.0.6.
CVE-2023-1540Medium 5.3
Observable Response Discrepancy in answerdev/answer
Affected: fixed in 1.0.6.
CVE-2023-1539Medium 5.3
Improper Restriction of Excessive Authentication Attempts in answerdev/answer
Affected: fixed in 1.0.6.
CVE-2023-1538Medium 5.3
Observable Timing Discrepancy in answerdev/answer
Affected: fixed in 1.0.6.

Show all 34 advisoriesShow fewer advisories

CVE-2023-1537Medium 5.3
Authentication Bypass by Capture-replay in answerdev/answer
Affected: fixed in 1.0.6.
CVE-2023-1536High 7.6
Cross-site Scripting (XSS) - Stored in answerdev/answer
Affected: fixed in 1.0.7.
CVE-2023-1535High 8.3
Cross-site Scripting (XSS) - Stored in answerdev/answer
Affected: fixed in 1.0.7.
CVE-2023-1245Low 3.5
Cross-site Scripting (XSS) - Stored in answerdev/answer
Affected: fixed in 1.0.6.
CVE-2023-1244Critical 9.3
Cross-site Scripting (XSS) - Stored in answerdev/answer
Affected: fixed in 1.0.6.
CVE-2023-1243Medium 6.0
Cross-site Scripting (XSS) - Stored in answerdev/answer
Affected: fixed in 1.0.6.
CVE-2023-1242High 8.0
Cross-site Scripting (XSS) - Stored in answerdev/answer
Affected: fixed in 1.0.6.
CVE-2023-1241High 8.8
Cross-site Scripting (XSS) - Stored in answerdev/answer
Affected: fixed in 1.0.6.
CVE-2023-1240High 8.0
Cross-site Scripting (XSS) - Stored in answerdev/answer
Affected: fixed in 1.0.6.
CVE-2023-1239Medium 6.0
Cross-site Scripting (XSS) - Reflected in answerdev/answer
Affected: fixed in 1.0.6.
CVE-2023-1238High 7.6
Cross-site Scripting (XSS) - Stored in answerdev/answer
Affected: fixed in 1.0.6.
CVE-2023-1237Low 3.4
Cross-site Scripting (XSS) - Stored in answerdev/answer
Affected: fixed in 1.0.6.
CVE-2023-0934Medium 6.3
Cross-site Scripting (XSS) - Stored in answerdev/answer
Affected: fixed in 1.0.5.
CVE-2023-0744Critical 9.8
Improper Access Control in answerdev/answer
Affected: fixed in 1.0.4.
CVE-2023-0743High 8.2
Cross-site Scripting (XSS) - Generic in answerdev/answer
Affected: fixed in 1.0.4.
CVE-2023-0742High 8.0
Cross-site Scripting (XSS) - Stored in answerdev/answer
Affected: fixed in 1.0.4.
CVE-2023-0741High 8.0
Cross-site Scripting (XSS) - DOM in answerdev/answer
Affected: fixed in 1.0.4.
CVE-2023-0740High 8.2
Cross-site Scripting (XSS) - Stored in answerdev/answer
Affected: fixed in 1.0.4.
CVE-2023-0739High 8.1
Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') in answerdev/answer
Affected: fixed in 1.0.4.