# github.com/answerdev/answer (Go) vulnerabilities 34 known vulnerabilities (2 critical, 18 high, 12 medium, 2 low), with the versions each affects and the releases that fix them. ## At a glance - Latest release: not known (cve.now hasn't read this package's releases) - Newest unaffected release: not known without release data - Registry: https://pkg.go.dev/github.com/answerdev/answer ## Advisories (34) ### [CVE-2023-4815](https://cve.now/CVE-2023-4815): Missing Authentication for Critical Function in answerdev/answer - Severity: High 8.3 - Published: Sep 7, 2023 - Affected: fixed in 1.1.3. ### [CVE-2023-4127](https://cve.now/CVE-2023-4127): Race Condition within a Thread in answerdev/answer - Severity: Medium 6.5 - Published: Aug 3, 2023 - Affected: fixed in 1.1.1. ### [CVE-2023-4126](https://cve.now/CVE-2023-4126): Insufficient Session Expiration in answerdev/answer - Severity: Medium 4.1 - Published: Aug 3, 2023 - Affected: fixed in 1.1.0. ### [CVE-2023-4125](https://cve.now/CVE-2023-4125): Weak Password Requirements in answerdev/answer - Severity: High 8.8 - Published: Aug 3, 2023 - Affected: fixed in 1.1.0. ### [CVE-2023-4124](https://cve.now/CVE-2023-4124): Missing Authorization in answerdev/answer - Severity: High 8.1 - Published: Aug 3, 2023 - Affected: fixed in 1.1.1. ### [CVE-2023-2590](https://cve.now/CVE-2023-2590): Missing Authorization in answerdev/answer - Severity: High 7.7 - Published: May 9, 2023 - Affected: fixed in 1.0.9. ### [CVE-2023-1976](https://cve.now/CVE-2023-1976): Password Aging with Long Expiration in answerdev/answer - Severity: Medium 4.6 - Published: Apr 11, 2023 - Affected: fixed in 1.0.6. ### [CVE-2023-1975](https://cve.now/CVE-2023-1975): Insertion of Sensitive Information Into Sent Data in answerdev/answer - Severity: High 7.6 - Published: Apr 11, 2023 - Affected: fixed in 1.0.8. ### [CVE-2023-1974](https://cve.now/CVE-2023-1974): Exposure of Sensitive Information Through Metadata in answerdev/answer - Severity: High 7.7 - Published: Apr 11, 2023 - Affected: fixed in 1.0.8. ### [CVE-2023-1543](https://cve.now/CVE-2023-1543): Insufficient Session Expiration in answerdev/answer - Severity: Medium 6.8 - Published: Mar 21, 2023 - Affected: fixed in 1.0.6. ### [CVE-2023-1542](https://cve.now/CVE-2023-1542): Business Logic Errors in answerdev/answer - Severity: High 8.1 - Published: Mar 21, 2023 - Affected: fixed in 1.0.6. ### [CVE-2023-1541](https://cve.now/CVE-2023-1541): Business Logic Errors in answerdev/answer - Severity: Medium 6.0 - Published: Mar 21, 2023 - Affected: fixed in 1.0.6. ### [CVE-2023-1540](https://cve.now/CVE-2023-1540): Observable Response Discrepancy in answerdev/answer - Severity: Medium 5.3 - Published: Mar 21, 2023 - Affected: fixed in 1.0.6. ### [CVE-2023-1539](https://cve.now/CVE-2023-1539): Improper Restriction of Excessive Authentication Attempts in answerdev/answer - Severity: Medium 5.3 - Published: Mar 21, 2023 - Affected: fixed in 1.0.6. ### [CVE-2023-1538](https://cve.now/CVE-2023-1538): Observable Timing Discrepancy in answerdev/answer - Severity: Medium 5.3 - Published: Mar 21, 2023 - Affected: fixed in 1.0.6. ### [CVE-2023-1537](https://cve.now/CVE-2023-1537): Authentication Bypass by Capture-replay in answerdev/answer - Severity: Medium 5.3 - Published: Mar 21, 2023 - Affected: fixed in 1.0.6. ### [CVE-2023-1536](https://cve.now/CVE-2023-1536): Cross-site Scripting (XSS) - Stored in answerdev/answer - Severity: High 7.6 - Published: Mar 21, 2023 - Affected: fixed in 1.0.7. ### [CVE-2023-1535](https://cve.now/CVE-2023-1535): Cross-site Scripting (XSS) - Stored in answerdev/answer - Severity: High 8.3 - Published: Mar 21, 2023 - Affected: fixed in 1.0.7. ### [CVE-2023-1245](https://cve.now/CVE-2023-1245): Cross-site Scripting (XSS) - Stored in answerdev/answer - Severity: Low 3.5 - Published: Mar 7, 2023 - Affected: fixed in 1.0.6. ### [CVE-2023-1244](https://cve.now/CVE-2023-1244): Cross-site Scripting (XSS) - Stored in answerdev/answer - Severity: Critical 9.3 - Published: Mar 7, 2023 - Affected: fixed in 1.0.6. ### [CVE-2023-1243](https://cve.now/CVE-2023-1243): Cross-site Scripting (XSS) - Stored in answerdev/answer - Severity: Medium 6.0 - Published: Mar 7, 2023 - Affected: fixed in 1.0.6. ### [CVE-2023-1242](https://cve.now/CVE-2023-1242): Cross-site Scripting (XSS) - Stored in answerdev/answer - Severity: High 8.0 - Published: Mar 7, 2023 - Affected: fixed in 1.0.6. ### [CVE-2023-1241](https://cve.now/CVE-2023-1241): Cross-site Scripting (XSS) - Stored in answerdev/answer - Severity: High 8.8 - Published: Mar 7, 2023 - Affected: fixed in 1.0.6. ### [CVE-2023-1240](https://cve.now/CVE-2023-1240): Cross-site Scripting (XSS) - Stored in answerdev/answer - Severity: High 8.0 - Published: Mar 7, 2023 - Affected: fixed in 1.0.6. ### [CVE-2023-1239](https://cve.now/CVE-2023-1239): Cross-site Scripting (XSS) - Reflected in answerdev/answer - Severity: Medium 6.0 - Published: Mar 7, 2023 - Affected: fixed in 1.0.6. ### [CVE-2023-1238](https://cve.now/CVE-2023-1238): Cross-site Scripting (XSS) - Stored in answerdev/answer - Severity: High 7.6 - Published: Mar 7, 2023 - Affected: fixed in 1.0.6. ### [CVE-2023-1237](https://cve.now/CVE-2023-1237): Cross-site Scripting (XSS) - Stored in answerdev/answer - Severity: Low 3.4 - Published: Mar 7, 2023 - Affected: fixed in 1.0.6. ### [CVE-2023-0934](https://cve.now/CVE-2023-0934): Cross-site Scripting (XSS) - Stored in answerdev/answer - Severity: Medium 6.3 - Published: Feb 21, 2023 - Affected: fixed in 1.0.5. ### [CVE-2023-0744](https://cve.now/CVE-2023-0744): Improper Access Control in answerdev/answer - Severity: Critical 9.8 - Published: Feb 8, 2023 - Affected: fixed in 1.0.4. ### [CVE-2023-0743](https://cve.now/CVE-2023-0743): Cross-site Scripting (XSS) - Generic in answerdev/answer - Severity: High 8.2 - Published: Feb 8, 2023 - Affected: fixed in 1.0.4. ### [CVE-2023-0742](https://cve.now/CVE-2023-0742): Cross-site Scripting (XSS) - Stored in answerdev/answer - Severity: High 8.0 - Published: Feb 8, 2023 - Affected: fixed in 1.0.4. ### [CVE-2023-0741](https://cve.now/CVE-2023-0741): Cross-site Scripting (XSS) - DOM in answerdev/answer - Severity: High 8.0 - Published: Feb 8, 2023 - Affected: fixed in 1.0.4. ### [CVE-2023-0740](https://cve.now/CVE-2023-0740): Cross-site Scripting (XSS) - Stored in answerdev/answer - Severity: High 8.2 - Published: Feb 8, 2023 - Affected: fixed in 1.0.4. ### [CVE-2023-0739](https://cve.now/CVE-2023-0739): Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') in answerdev/answer - Severity: High 8.1 - Published: Feb 8, 2023 - Affected: fixed in 1.0.4. --- Source: cve.now Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards. Page: https://cve.now/packages/go/github.com/answerdev/answer Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.