Skip to content
OpenAdvisories

Package · Hex

ash_cloak

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Low 2.1
    CVE-2026-81322

    Cloaked plaintext leaks through a non-sensitive action argument in AshCloak

    Exposure of Sensitive Information to an Unauthorized Actor vulnerability in ash-project ash_cloak allows anyone with access to logs, error trackers, or crash reports, or anyone who can trigger a validation error, to recover the plaintext of a field the librar…

    ash-project ash_cloak ash_cloak Hex
  • Medium 5.9
    CVE-2026-81319

    Unsafe deserialization of decrypted terms enables node DoS in AshCloak

    Deserialization of Untrusted Data vulnerability in ash-project ash_cloak allows an attacker who can influence the bytes of an encrypted column to crash the BEAM node, by triggering unbounded atom creation or a decompression bomb during decryption. AshCloak.Ca…

    ash-project ash_cloak ash_cloak Hex