How many CVEs have a located fix in answerdev/answer?

30 published CVEs have a fix traced to functions in answerdev/answer, touching 82 functions across 46 files.

Which function in answerdev/answer has been patched by the most CVEs?

Close in internal/service/uploader/upload.go has been changed by 5 CVE fixes, from 2023 to 2023.

How large is a typical CVE fix in answerdev/answer?

The median fix changes 13 lines. 67% of fixes change 20 lines or fewer, and 40% change a single function.

How is a fix located to a function?

The upstream fix commit for each CVE is fetched and its diff is split into hunks. Each hunk is attributed to the function, method or type it changes, using the definition the diff itself names. Backports of the same fix to stable branches are counted once.

RadicalNotion.AI

Log in Create an account

go

typescript

#155 of 500 repositories

answerdev/answer

Name: answerdev/answer: functions patched by CVE fixes
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

Functions and files changed by CVE fixes in this repository.

Latest located fix September 7, 2023

30

CVE fixes located

Published CVEs

82

Functions patched

Distinct function sites

46

Files patched

Distinct source files

2023

Years covered

By CVE publication date

Overview

30 published CVEs have a fix traced to functions in answerdev/answer, the earliest published in 2023. Those fixes changed 82 distinct functions across 46 files, in 302 patch hunks.

Among the 500 repositories tracked here, answerdev/answer ranks #155 by the number of CVEs with a located fix.

Most patched functions

Functions in answerdev/answer changed by the most CVE fixes.

Most patched files

Files in answerdev/answer changed by the most CVE fixes.

1pkg/converter/markdown.go6 CVEs · 5 functions
2internal/service/uploader/upload.go5 CVEs · 5 functions
3internal/base/reason/reason.go5 CVEs · 0 functions
4internal/controller/user_controller.go4 CVEs · 4 functions
5internal/base/middleware/avatar.go4 CVEs · 1 functions
6internal/schema/user_schema.go3 CVEs · 4 functions
7internal/service/user_admin/user_backyard.go3 CVEs · 3 functions
8internal/base/translator/provider.go3 CVEs · 1 functions
9internal/install/install_req.go3 CVEs · 1 functions
10internal/schema/tag_schema.go3 CVEs · 1 functions

Fix size

How much code a CVE fix in answerdev/answer changes, with backports counted once.

13

Median lines changed

Added plus removed, per CVE

67%

Fixes of 20 lines or fewer

Share of CVE fixes

40%

Fixes in a single function

Share of CVE fixes

Latest CVEs

The most recently published CVEs with a fix located in answerdev/answer, and the functions each fix changed.

Missing Authentication for Critical Function in answerdev/answer
CVE-2023-4815sendAcceptAnswerNotification sendCancelAcceptAnswerNotification AdminAuth
High · CVSS 8.8
EPSS 0.8%2023-09-07
Answer has Race Condition within a Thread
CVE-2023-4127VoteRepo VoteUp DeleteAnswer
Medium · CVSS 5.9
EPSS 0.5%2023-08-03
Answer Insufficient Session Expiration vulnerability
CVE-2023-4126UseRePassword UserModifyPassword RemoveUserTokens
High · CVSS 8.8
EPSS 0.6%2023-08-03
Answer has Weak Password Requirements
CVE-2023-4125Check CheckPassword addLoginLimitations
High · CVSS 8.8
EPSS 0.9%2023-08-03
Answer Missing Authorization vulnerability
CVE-2023-4124initDefaultRankPrivileges initSiteInfoPrivilegeRank PrivilegeOptions
Medium · CVSS 6.5
EPSS 0.7%2023-08-03
Answer Missing Authorization vulnerability
CVE-2023-2590updateAcceptAnswerRank initConfigTable
Low · CVSS 3.5
EPSS 0.5%2023-05-09
Answer vulnerable to Exposure of Sensitive Information Through Metadata
CVE-2023-1974Dexif Close
Medium · CVSS 6.5
EPSS 0.6%2023-04-11
Answer vulnerable to Insertion of Sensitive Information Into Sent Data
CVE-2023-1975Dexif Close
Medium · CVSS 6.5
EPSS 0.6%2023-04-11
Answer has Observable Response Discrepancy
CVE-2023-1540RetrievePassWord
Medium · CVSS 5.3
EPSS 0.6%2023-03-21
Answer vulnerable to Stored Cross-site Scripting
CVE-2023-1535Markdown2HTML
Medium · CVSS 5.4
EPSS 0.5%2023-03-21
Answer vulnerable to Business Logic Errors
CVE-2023-1541UpdateUserPassword
Low · CVSS 3.8
EPSS 0.6%2023-03-21
Answer vulnerable to Business Logic Errors
CVE-2023-1542UpdateUserStatusReq UpdateUserStatus
Medium · CVSS 5.4
EPSS 0.8%2023-03-21

Get an alert for each new answerdev/answer CVE, with the patched functions and AI-written analysis.

Monitor answer CVEs

Other repositories

Repositories with a similar number of located CVE fixes.

apache/nifi30 CVEs centreon/centreon30 CVEs langchain-ai/langchain30 CVEs nilsteampassnet/teampass30 CVEs openbao/openbao30 CVEs snipe/snipe-it30 CVEs vyperlang/vyper30 CVEs contao/contao31 CVEs

Browse all repositories

Frequently asked questions

Common questions about CVE fixes in answerdev/answer.

How many CVEs have a located fix in answerdev/answer?: 30 published CVEs have a fix traced to functions in answerdev/answer, touching 82 functions across 46 files.
Which function in answerdev/answer has been patched by the most CVEs?: Close in internal/service/uploader/upload.go has been changed by 5 CVE fixes, from 2023 to 2023.
How large is a typical CVE fix in answerdev/answer?: The median fix changes 13 lines. 67% of fixes change 20 lines or fewer, and 40% change a single function.
How is a fix located to a function?: The upstream fix commit for each CVE is fetched and its diff is split into hunks. Each hunk is attributed to the function, method or type it changes, using the definition the diff itself names. Backports of the same fix to stable branches are counted once.

References

Fix locations are computed by RadicalNotion.AI from the upstream patch diff of each CVE. CVE data is sourced from the CVE Program.

Track answerdev/answer CVEs

Get an alert when a new CVE lands in this repository, with the patched functions and AI-written remediation guidance.

Create an account See pricing