Vulnerability Database - OSV

CVE-2026-75757

github.com/ash-project/ash_admin

AshAdmin cookie reader matches names by substring, enabling actor/session... 31 Aug

Fix available
Severity - 8.3 (High)

EEF-CVE-2026-75757

Hex/ash_admin
github.com/ash-project/ash_admin

AshAdmin cookie reader matches names by substring, enabling actor/session shadowing from a sibling subdomain 31 Aug

Fix available
Severity - 8.3 (High)