What is GHSA-5w5r-8xc6-2xhw?

GHSA-5w5r-8xc6-2xhw is a security advisory published by GitHub Security Advisories with Medium severity. Apache Answer Exposure of Private Personal Information to an Unauthorized Actor vulnerability

Which CVE IDs does GHSA-5w5r-8xc6-2xhw cover?

GHSA-5w5r-8xc6-2xhw covers the following CVE IDs: CVE-2026-24735. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-5w5r-8xc6-2xhw?

GHSA-5w5r-8xc6-2xhw has a CVSS v3 base score of 7.5, published by GitHub Security Advisories.

Which products are affected by GHSA-5w5r-8xc6-2xhw?

GHSA-5w5r-8xc6-2xhw affects 1 product, including: go/github.com/apache/answer:\u003c= 1.7.1.

GHSA-5w5r-8xc6-2xhwMediumCVSS 7.5

Apache Answer Exposure of Private Personal Information to an Unauthorized Actor vulnerability

Vendor

GitHub Security Advisories

Published

February 4, 2026

Last Modified

February 4, 2026

🔗 CVE IDs covered (1)

CVE-2026-24735 →

📋 Description

Exposure of Private Personal Information to an Unauthorized Actor vulnerability in Apache Answer.

This issue affects Apache Answer: through 1.7.1.

An unauthenticated API endpoint incorrectly exposes full revision history for deleted content. This allows unauthorized users to retrieve restricted or sensitive information. Users are recommended to upgrade to version 2.0.0, which fixes the issue.

🎯 Affected products1

go/github.com/apache/answer:<= 1.7.1

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2026-24735
https://lists.apache.org/thread/whxloom7mpxlyt5wzdskflsg5mzdzd60
http://www.openwall.com/lists/oss-security/2026/02/04/1
https://github.com/advisories/GHSA-5w5r-8xc6-2xhw