GHSA-5xh2-23cc-5jc6: Strawberry GraphQL has type resolution vulnerability in node interface that allows potential data leakage through incorrect type resolution

GHSA-675f-rq2r-jw82: JWK Set's HTTP client only overwrites and appends JWK to local cache during refresh

GHSA-7w6r-748w-mh52: pgAdmin has Incorrect Default Permissions

GHSA-q8fg-cp3q-5jwm: Mattermost Incorrect Authorization vulnerability

GHSA-7rgp-4j56-fm79: Mattermost has Improper Check for Unusual or Exceptional Conditions

answerdev/answer is an open-source knowledge-based community software. Answer prior to 1.0.6 is vulnerable to account takeover because the password reset link does not expire.

**Answer vulnerable to account takeover because password reset links do not expire**

Moderate severity GitHub Reviewed Published Apr 11, 2023 to the GitHub Advisory Database • Updated Apr 11, 2023

Headline

GHSA-j97g-77fj-9c4p: Answer vulnerable to account takeover because password reset links do not expire

ghsa: Latest News