Vulnerabilities
Apache Answer 2.0.3 Patch Fixes Metadata Leak Vulnerability
A moderate severity authorization flaw in Apache Answer allowed authenticated users to view non-public question metadata, prompting an immediate update to version 2.0.3.
authorization bypass
Everything Patch Gazette has reported about authorization bypass: 2 stories, newest first. Part of our Vulnerabilities coverage.
Vulnerabilities
holaOS Authorization Flaw Lets External Users Run Agent Tasks
A missing authorization check in holaOS through 2026.822.1 allows any messaging user to execute agent tasks on operator machines via bot channels.