PT-2026-6525 · Go · Github.Com/Apache/Answer

Published 2026-02-05 · Updated 2026-02-05

OSV

Apache Answer Exposure of Private Personal Information to an Unauthorized Actor vulnerability in github.com/apache/answer.

NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions.

(If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.)

The additional affected modules and versions are: github.com/apache/answer before v2.0.0.

Related Identifiers

GO-2026-4421

Affected Products

Github.Com/Apache/Answer

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2026-24735 · Security Note
• https://osv.dev/vulnerability/GO-2026-4421 · Vendor Advisory
• https://github.com/advisories/GHSA-5w5r-8xc6-2xhw · Note
• https://lists.apache.org/thread/whxloom7mpxlyt5wzdskflsg5mzdzd60 · Note
• http://openwall.com/lists/oss-security/2026/02/04/1 · Note