Vulnerabilities
Godot 4.x heap out-of-bounds bugs remain unpatched despite CVE assignment
Three memory-safety flaws in Godot 4 file parsers were disclosed in September and remain unfixed in stable releases through October 2026.
oss-security
Everything Patch Gazette has reported about oss-security: 3 stories, newest first. Part of our Vulnerabilities coverage.
Vulnerabilities
Apache Answer 2.0.3 Fixes Email Code Confusion Flaw
A new update for Apache Answer resolves a moderate severity vulnerability where email verification codes could be reused across workflows, potentially allowing account takeover.
Vulnerabilities
Apache Answer 2.0.3 Patch Fixes Metadata Leak Vulnerability
A moderate severity authorization flaw in Apache Answer allowed authenticated users to view non-public question metadata, prompting an immediate update to version 2.0.3.