dev  

Messages by Thread

• CVE-2026-79613: Apache Answer: Disclosure of Comments on Non-Public Content Through Public Profiles Enxin Xie
• CVE-2026-90910: Apache Answer: Reaction API authorization bypass for restricted content Enxin Xie
• CVE-2026-86589: Apache Answer: User Center integration does not revoke first-login sessions after central account suspension Enxin Xie
• CVE-2026-64945: Apache Answer: Incorrect permission mapping allows users with only the unpin permission to hide/show questions Enxin Xie
• CVE-2026-79633: Apache Answer: Missing Authorization Allows Mutations of Non-Public Content Enxin Xie
• CVE-2026-79624: Apache Answer: Stale Visit Tokens Retain Access to Private Uploads After Session Revocation Enxin Xie
• CVE-2026-76994: Apache Answer: Exposure of Hidden Question Metadata Through Public Answer Profiles Enxin Xie
• CVE-2026-79620: Apache Answer: Improper Authorization Allows Disclosure of Non-Public Question Metadata Enxin Xie
• CVE-2026-71563: Apache Answer: MCP Answer Retrieval Exposes Content from Non-Public Questions Enxin Xie
• CVE-2026-67249: Apache Answer: Email Code Purpose Confusion May Allow Account Takeover Enxin Xie
• CVE-2026-68482: Apache Answer: Improper Authorization in Question Invite User Lookup Enxin Xie
• CVE-2026-64943: Apache Answer: API keys logged in plaintext during authentication Enxin Xie
• CVE-2026-64944: Apache Answer: Stored XSS via unsanitized HTML in imported question content Enxin Xie
• [ANNOUNCE] Apache Answer v2.0.3 available LinkinStar
• [RESULT][VOTE] Release Apache Answer v2.0.3-RC1 LinkinStar
• [VOTE] Release Apache Answer v2.0.3-RC1 LinkinStar
  • Re: [VOTE] Release Apache Answer v2.0.3-RC1 Shuailing LI
  • Re: [VOTE] Release Apache Answer v2.0.3-RC1 Feng Dong
  • Re: [VOTE] Release Apache Answer v2.0.3-RC1 Yubin Ren
  • Re: [VOTE] Release Apache Answer v2.0.3-RC1 Kumfo Yang
• Using AI for translation? Christofer Dutz
  • Re: Using AI for translation? LinkinStar
  • Re: Using AI for translation? Feng Dong
  • AW: Using AI for translation? Christofer Dutz
  • Re: Using AI for translation? Han Gao
  • AW: Using AI for translation? Christofer Dutz
  • Re: Using AI for translation? Han Gao
  • Re: Using AI for translation? LinkinStar
  • Re: Using AI for translation? Luke Gao
  • AW: Using AI for translation? Christofer Dutz
  • Re: Using AI for translation? Luke Gao
  • AW: Using AI for translation? Christofer Dutz
  • Re: Using AI for translation? LinkinStar
  • AW: Using AI for translation? Christofer Dutz
  • Re: Using AI for translation? Luke Gao
  • Re: Using AI for translation? Feng Dong
  • Re: Using AI for translation? Luke Gao
  • Re: Using AI for translation? Feng Dong
  • AW: Re: Using AI for translation? Christofer Dutz via dev
  • Re: Re: Using AI for translation? LinkinStar
• [DISCUSS]Should we release a new version? mingcheng
  • Re: [DISCUSS]Should we release a new version? LinkinStar
  • Re: [DISCUSS]Should we release a new version? Feng Dong
• CVE-2026-60053: Apache Answer: Residual Administrative API Key Access After Role or Account Revocation Enxin Xie
• CVE-2026-60023: Apache Answer: Unauthorized disclosure of deleted or pending answer content Enxin Xie
• CVE-2026-50749: Apache Answer: Missing authorization in revision audit reject allows authenticated users to reject pending revisions Enxin Xie
• CVE-2026-48912: Apache Answer: Improper authorization in avatar update cleanup allows authenticated users to delete arbitrary uploaded files by URL Enxin Xie
• CVE-2026-48911: Apache Answer: Unauthenticated OAuth Email-Binding Account Takeover via Existing User Confirmation Flow Enxin Xie
• CVE-2026-48834: Apache Answer: Denial of service via crafted Accept-Language header parsing Enxin Xie
• [ANNOUNCE] Apache Answer 2.0.2 released Robin Ren
• [RESULT][VOTE] Release Apache Answer 2.0.2-RC3 Robin Ren
• [VOTE] Release Apache Answer v2.0.2-RC3 Robin Ren
  • Re: [VOTE] Release Apache Answer v2.0.2-RC3 LinkinStar
  • Re: [VOTE] Release Apache Answer v2.0.2-RC3 Luffy
  • Re: [VOTE] Release Apache Answer v2.0.2-RC3 Shuailing LI
• [CANCEL][VOTE] Release Apache Answer v2.0.2-RC2 Robin Ren
• [VOTE] Release Apache Answer v2.0.2-RC2 Robin Ren
  • Re: [VOTE] Release Apache Answer v2.0.2-RC2 mingcheng
  • Re: [VOTE] Release Apache Answer v2.0.2-RC2 LinkinStar
  • Re: [VOTE] Release Apache Answer v2.0.2-RC2 Luffy
• [CANCEL][VOTE] Release Apache Answer v2.0.2-RC1 Robin Ren
• [VOTE] Release Apache Answer v2.0.2-RC1 Robin Ren
  • Re: [VOTE] Release Apache Answer v2.0.2-RC1 LinkinStar
• CVE-2026-25700: Apache Answer: AdminToken not invalidated after admin deactivation Enxin Xie
• PlusOne interview — Answer 2.0 and AI-powered Q&A Rich Bowen
• CVE-2026-25688: Apache Answer: XSS in AI Answer Rendering Enxin Xie
• CVE-2026-25699: Apache Answer: Authorization Bypass in Timeline API Enxin Xie
• CVE-2026-33582: Apache Answer: Uploading specially crafted TIFF files causes an Out-of-Memory error Enxin Xie
• CVE-2026-34031: Apache Answer: The custom avatar was not properly validated Enxin Xie
• CVE-2026-34033: Apache Answer: HTML Content Injection in Email Enxin Xie
• CVE-2026-34905: Apache Answer: Unlisted Questions Accessible via Direct API Access Enxin Xie
• [ANNOUNCE] Apache Answer v2.0.1 available LinkinStar
• [RESULT][VOTE] Release Apache Answer v2.0.1-RC2 LinkinStar
• [VOTE] Release Apache Answer v2.0.1-RC2 LinkinStar
  • Re: [VOTE] Release Apache Answer v2.0.1-RC2 Yubin Ren
  • Re: [VOTE] Release Apache Answer v2.0.1-RC2 Kumfo Yang
  • Re: [VOTE] Release Apache Answer v2.0.1-RC2 Luffy
  • [VOTE] Release Apache Answer v2.0.1-RC2 Shuailing LI
• [CANCEL][VOTE] Release Apache Answer v2.0.1-RC1 LinkinStar
• [VOTE] Release Apache Answer v2.0.1-RC1 LinkinStar
  • Re: [VOTE] Release Apache Answer v2.0.1-RC1 Yubin Ren
• CVE-2026-24735: Apache Answer: Revision API Improper Access Control leads to Information Disclosure Enxin Xie
• [ANNOUNCE] Apache Answer v2.0.0 available Shuailing LI
• [RESULT][VOTE] Release Apache Answer v2.0.0-RC2 Shuailing LI
• New Contributor - Tanay Paul Tanay Paul
  • Re: New Contributor - Tanay Paul mingcheng
• [VOTE] Release Apache Answer v2.0.0-RC2 Shuailing LI
  • Re: [VOTE] Release Apache Answer v2.0.0-RC2 Yubin Ren
  • Re: [VOTE] Release Apache Answer v2.0.0-RC2 LinkinStar
  • Re: [VOTE] Release Apache Answer v2.0.0-RC2 Kumfo Yang
• [CANCEL][VOTE] Release Apache Answer v2.0.0-RC1 Shuailing LI
• [VOTE] Release Apache Answer v2.0.0-RC1 Shuailing LI
  • Re: [VOTE] Release Apache Answer v2.0.0-RC1 Shuailing LI
• [ANNOUNCE] Apache Answer v1.7.1 available LinkinStar
• [RESULT][VOTE] Release Apache Answer v1.7.1-RC2 LinkinStar
• [VOTE] Release Apache Answer v1.7.1-RC2 LinkinStar
  • Re: [VOTE] Release Apache Answer v1.7.1-RC2 Shuailing LI
  • Re: [VOTE] Release Apache Answer v1.7.1-RC2 Yubin Ren
  • Re: [VOTE] Release Apache Answer v1.7.1-RC2 Kumfo Yang
  • Re: [VOTE] Release Apache Answer v1.7.1-RC2 mingcheng
  • AW: [VOTE] Release Apache Answer v1.7.1-RC2 Christofer Dutz
  • Re: [VOTE] Release Apache Answer v1.7.1-RC2 LinkinStar
• [CANCEL] [VOTE] Release Apache Answer v1.7.1-RC1 LinkinStar
  • AW: [CANCEL] [VOTE] Release Apache Answer v1.7.1-RC1 Christofer Dutz
  • Re: [CANCEL] [VOTE] Release Apache Answer v1.7.1-RC1 LinkinStar
• [VOTE] Release Apache Answer v1.7.1-RC1 LinkinStar
  • Re: [VOTE] Release Apache Answer v1.7.1-RC1 Shuailing LI
  • Re: [VOTE] Release Apache Answer v1.7.1-RC1 LinkinStar
• [ANNOUNCE] Apache Answer 1.7.0 available Robin Ren
• [RESULT][VOTE] Release Apache Answer v1.7.0-RC1 Robin Ren
• [VOTE] Release Apache Answer 1.7.0-RC1 Robin Ren
  • Re: [VOTE] Release Apache Answer 1.7.0-RC1 mingcheng
  • Re: [VOTE] Release Apache Answer 1.7.0-RC1 Shuailing LI
  • Re: [VOTE] Release Apache Answer 1.7.0-RC1 Luffy
• [ANNOUNCE] Apache Answer v1.6.0 available Kumfo Yang
• [VOTE] Release Apache Answer v1.6.0-RC1 Kumfo Yang
  • Re: [VOTE] Release Apache Answer v1.6.0-RC1 mingcheng
  • Re: [VOTE] Release Apache Answer v1.6.0-RC1 LinkinStar
  • Re: [VOTE] Release Apache Answer v1.6.0-RC1 Luffy
• [ANNOUNCE] Apache Answer v1.5.1 available LinkinStar
• [RESULT][VOTE] Release Apache Answer v1.5.1-RC1 LinkinStar
• Where are discussions happening? Christofer Dutz
  • Re: Where are discussions happening? Ning Qi
  • AW: Where are discussions happening? Christofer Dutz
  • Re: Where are discussions happening? Shuailing LI
• [VOTE] Release Apache Answer v1.5.1-RC1 LinkinStar
  • Re: [VOTE] Release Apache Answer v1.5.1-RC1 Shuailing LI
  • Re: [VOTE] Release Apache Answer v1.5.1-RC1 mingcheng
  • Re: [VOTE] Release Apache Answer v1.5.1-RC1 Yubin Ren
  • Re: [VOTE] Release Apache Answer v1.5.1-RC1 Luffy
• [ANNOUNCE] Apache Answer v1.5.0 available Shuailing LI
• [RESULT][VOTE] Release Apache Answer v1.5.0-RC1 Shuailing LI
• [VOTE] Release Apache Answer v1.5.0-RC1 Shuailing LI
  • Re: [VOTE] Release Apache Answer v1.5.0-RC1 mingcheng
  • Re: [VOTE] Release Apache Answer v1.5.0-RC1 Luffy
  • Re: [VOTE] Release Apache Answer v1.5.0-RC1 Yubin Ren
  • Re: [VOTE] Release Apache Answer v1.5.0-RC1 Kumfo Yang
• CVE-2025-29868: Apache Answer: Using externally referenced images can leak user privacy. Enxin Xie
• [ANNOUNCE] Apache Answer v1.4.5 available Luffy
  • Re: [ANNOUNCE] Apache Answer v1.4.5 available Craig Russell
  • Re: [ANNOUNCE] Apache Answer v1.4.5 available Luffy
  • Re: [ANNOUNCE] Apache Answer v1.4.5 available Craig Russell
• [RESULT][VOTE] Release Apache Answer v1.4.5-RC1 Luffy
• [VOTE] Release Apache Answer 1.4.5-RC1 Luffy
  • Re: [VOTE] Release Apache Answer 1.4.5-RC1 mingcheng
  • Re: [VOTE] Release Apache Answer 1.4.5-RC1 Shuailing LI
  • Re: [VOTE] Release Apache Answer 1.4.5-RC1 LinkinStar
• Re: Answer podling graduation resolution is missing tison
• [RESULT][VOTE] Release Apache Answer v1.4.2-RC2 mingcheng
• About contribution to Answer Selim Soufargi
  • AW: About contribution to Answer Christofer Dutz
  • Re: About contribution to Answer Selim Soufargi
  • Re: About contribution to Answer Ning Qi
• Run an Apache instance? Christofer Dutz
  • Re: Run an Apache instance? Ning Qi
  • AW: Run an Apache instance? Christofer Dutz
  • Re: Run an Apache instance? Ning Qi
• [VOTE] Release Apache Answer v1.4.2-RC2 mingcheng
  • Re: [VOTE] Release Apache Answer v1.4.2-RC2 LinkinStar
  • Re: [VOTE] Release Apache Answer v1.4.2-RC2 Shuailing LI
  • Re: [VOTE] Release Apache Answer v1.4.2-RC2 Kumfo Yang
  • Re: [VOTE] Release Apache Answer v1.4.2-RC2 Luffy
  • Re: [VOTE] Release Apache Answer v1.4.2-RC2 Yubin Ren
• [CANCEL][VOTE] Release Apache Answer, Incubating, v1.4.2-RC1 mingcheng
• [VOTE] Release Apache Answer(Incubating) v1.4.2-RC1 mingcheng
  • AW: [VOTE] Release Apache Answer(Incubating) v1.4.2-RC1 Christofer Dutz
  • Re: [VOTE] Release Apache Answer(Incubating) v1.4.2-RC1 mingcheng
• SMTP Setup - Not receiving emails Dukureh, Haji
  • Re: SMTP Setup - Not receiving emails sonui
• [ACTION REQUIRED] Removal of v3 artifact actions on December 5th Jacob Wujciak
• CVE-2024-45719: Apache Answer: Predictable Authorization Token Using UUIDv1 Enxin Xie
• [ANNOUNCE] Apache Answer(Incubating) v1.4.1 available Robin Ren
• [Result][VOTE] Graduate Apache Answer (incubating) as a Top-Level Project Ning Qi
• [REMINDER] The Apache Answer project v1.4.2-RC1 has been waiting for votes for quite some time now Robin Ren
• [VOTE]Graduate Apache Answer (incubating) as a Top Level Project Ning Qi
  • Re: [VOTE]Graduate Apache Answer (incubating) as a Top Level Project mingcheng
  • Re: [VOTE]Graduate Apache Answer (incubating) as a Top Level Project Feng Dong
  • Re: [VOTE]Graduate Apache Answer (incubating) as a Top Level Project Luffy
  • Re: [VOTE]Graduate Apache Answer (incubating) as a Top Level Project Anne Zhu
  • Re: [VOTE]Graduate Apache Answer (incubating) as a Top Level Project Shuailing LI
  • Re: [VOTE]Graduate Apache Answer (incubating) as a Top Level Project LinkinStar
• [RESULT][VOTE] Release Apache Answer(Incubating) v1.4.1-RC2 Robin Ren
• [VOTE] Release Apache Answer (Incubating) v1.4.1-RC2 Robin Ren
  • Re: [VOTE] Release Apache Answer (Incubating) v1.4.1-RC2 Shuailing LI
  • Re: [VOTE] Release Apache Answer (Incubating) v1.4.1-RC2 Kumfo Yang
  • Re: [VOTE] Release Apache Answer (Incubating) v1.4.1-RC2 LinkinStar
• [Announce] New PPMC Member: Lu Fei Joyqi
  • Re: [Announce] New PPMC Member: Lu Fei Sonui
  • Re: [Announce] New PPMC Member: Lu Fei Yubin Ren
  • Re: [Announce] New PPMC Member: Lu Fei Han Gao
  • [Announce] New PPMC Member: Lu Fei Ning Qi
  • Re: [Announce] New PPMC Member: Lu Fei LinkinStar
  • Re: [Announce] New PPMC Member: Lu Fei Luffy
  • Welcome Aboard, Luffy! mingcheng
  • Re: [Announce] New PPMC Member: Lu Fei Feng Dong
  • Re: [Announce] New PPMC Member: Lu Fei Shuailing LI
  • Re: [Announce] New PPMC Member: Lu Fei Kumfo Yang
• Re: [REMINDER] The Apache Answer project v1.4.1-RC1 has been waiting for votes for quite some time now Craig Russell
  • [REMINDER] The Apache Answer project v1.4.1-RC1 has been waiting for votes for quite some time now Robin Ren
• [RESULT][VOTE] Release Apache Answer(Incubating) v1.4.1-RC1 Robin Ren

• Earlier messages