Vulnerabilities

search
ID
Packages
Summary
Published
arrow_upward
Attributes
CVE-2026-82758
  • github.com/ash-project/ash_authentication_oauth2_server
 ash_authentication_oauth2_server treats an empty resolved secret as valid,... 07 Sep
  • Fix available
  • Severity - 6.3 (Medium)
EEF-CVE-2026-82758
  • Hex/ash_authentication_oauth2_server
  • github.com/ash-project/ash_authentication_oauth2_server
 ash_authentication_oauth2_server treats an empty resolved secret as valid, opening the gated Dynamic Client Registration endpoint 07 Sep
  • Fix available
  • Severity - 6.3 (Medium)