Vulnerabilities

ID
Packages
Summary
Published
arrow_upward
Attributes
CVE-2026-82755
  • github.com/ash-project/ash_authentication_oauth2_server
ash_authentication_oauth2_server serves tenant-specific OAuth metadata as... 07 Sep
  • Fix available
  • Severity - 6.3 (Medium)
EEF-CVE-2026-82755
  • Hex/ash_authentication_oauth2_server
  • github.com/ash-project/ash_authentication_oauth2_server
ash_authentication_oauth2_server serves tenant-specific OAuth metadata as publicly cacheable without Vary, enabling cross-tenant confusion 07 Sep
  • Fix available
  • Severity - 6.3 (Medium)