Skip to content
OpenAdvisories

Package · Hex

ash_authentication_phoenix

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.2
    CVE-2026-81632

    Single-use sign-in token placed in a redirect query string in AshAuthenticationPhoenix

    Use of HTTP Request With Sensitive Query String vulnerability in team-alembic AshAuthenticationPhoenix allows someone able to read access logs, proxy logs or browser history to recover a single-use sign-in token and authenticate as its owner. After a successf…

    team-alembic ash_authentication ash_authentication_phoenix ash_authentication Hex