Apache Answer Vulnerabilities and Security Flaws Fixed

This advisory reports multiple serious vulnerabilities in an Apache Q&A tool — a critical XSS that can execute scripts and lead to data theft, token validation failures allowing reuse of admin tokens, Timeline API path checks that leak private data, a TIFF-based memory exhaustion crash, and HTML injection in email alerts — and urges immediate upgrade to Apache Answer 2.0.1 to remediate these issues.