CVE-2026-64943: Apache Answer writes full API keys to logs up to version 2.0.2

This advisory was posted to the oss-sec feed on October 15, 2026, and recorded on October 16, 2026. The vulnerability, identified as CVE-2026-64943, affects Apache Answer up to version 2.0.2. According to the description, complete API keys are written to application logs on every authenticated request. Anyone with read access to those logs can retrieve and reuse active bearer credentials. The source classifies severity as low. The recommendation is to upgrade to version 2.0.3, which fixes the problem. The text consulted is an automatic translation of the feed content; to confirm details, check the original advisory cited in the source and the official Apache Answer project page.