Skip to content
OpenAdvisories

Package · Hex

ash_authentication_phoenix

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.1
    CVE-2026-86533

    Revoked session accepted because the session jti is never checked in AshAuthentication and AshAuthentication Phoenix

    Insufficient Session Expiration vulnerability in team-alembic AshAuthentication and AshAuthentication Phoenix allows a revoked session to remain fully authenticated. A resource configured with session_identifier :jti and require_token_presence_for_authenticat…

    team-alembic ash_authentication ash_authentication_phoenix ash_authentication Hex