Skip to content
OpenAdvisories

Package · Hex

ash_paper_trail

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.9
    CVE-2026-77970

    Sensitive fields nested in embedded values are not redacted in AshPaperTrail versions

    Cleartext Storage of Sensitive Information vulnerability in ash-project ash_paper_trail allows an attacker with read access to the generated version resource to recover sensitive values nested inside embedded resources, unions, or lists. sensitive_attributes …

    ash-project ash_paper_trail ash_paper_trail Hex
  • Medium 5.9
    CVE-2026-75847

    Sensitive attribute values stored in a non-sensitive public changes map in AshPaperTrail

    Cleartext Storage of Sensitive Information vulnerability in ash-project ash_paper_trail allows an attacker with read access to the generated version resource to recover the plaintext of sensitive? attributes. AshPaperTrail stores the values of tracked sensiti…

    ash-project ash_paper_trail ash_paper_trail Hex