Skip to content
OpenAdvisories

Package · Hex

ash_paper_trail

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Feed

  • Low 2.1
    CVE-2026-77831

    Algorithmic-complexity denial of service in AshPaperTrail full-diff list tracking

    Inefficient Algorithmic Complexity vulnerability in ash-project ash_paper_trail allows a user who can submit a large array attribute to a paper-trailed create or update action to cause a denial of service through excessive CPU and memory use. With full-diff c…

    ash-project ash_paper_trail ash_paper_trail Hex
  • Medium 5.9
    CVE-2026-77970

    Sensitive fields nested in embedded values are not redacted in AshPaperTrail versions

    Cleartext Storage of Sensitive Information vulnerability in ash-project ash_paper_trail allows an attacker with read access to the generated version resource to recover sensitive values nested inside embedded resources, unions, or lists. sensitive_attributes …

    ash-project ash_paper_trail ash_paper_trail Hex
  • Medium 5.9
    CVE-2026-75847

    Sensitive attribute values stored in a non-sensitive public changes map in AshPaperTrail

    Cleartext Storage of Sensitive Information vulnerability in ash-project ash_paper_trail allows an attacker with read access to the generated version resource to recover the plaintext of sensitive? attributes. AshPaperTrail stores the values of tracked sensiti…

    ash-project ash_paper_trail ash_paper_trail Hex