Team-Alembic Ash Authentication
5 CVEs affecting Team-Alembic Ash Authentication. Latest disclosed: 2026-08-25. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-25202 | Medium | 6.5 | 2025-02-11 | Ash Authentication is an authentication framework for Elixir applications. Applications which have been bootstrapped by the igniter installer present since Ash… |
CVE-2025-32782 | Medium | 5.3 | 2025-04-15 | Ash Authentication provides authentication for the Ash framework. The confirmation flow for account creation currently uses a GET request triggered by clicking… |
CVE-2026-66882 | | 2026-08-25 | Improper Neutralization of Input During Web Page Generation (XSS) vulnerability in team-alembic AshAuthentication allows reflected cross-site scripting via the… | |
CVE-2026-65633 | | 2026-08-25 | Improper Authentication vulnerability in team-alembic AshAuthentication allows purpose-limited JWTs to be replayed as full bearer API credentials when a resour… | |
CVE-2026-49757 | | 2026-06-15 | Authentication Bypass by Spoofing vulnerability in team-alembic AshAuthentication allows account takeover of local users via OAuth2/OIDC sign-in. AshAuthentic… |