Vulnerability Database - OSV

CVE-2026-76949

github.com/team-alembic/ash_authentication

Remember-me sign-in guard reads a session key that is never written in... 17 Sep

Fix available
Severity - 9.1 (Critical)

EEF-CVE-2026-76949

Hex/ash_authentication
github.com/team-alembic/ash_authentication

Remember-me sign-in guard reads a session key that is never written in ash_authentication, allowing session replacement 17 Sep

Fix available
Severity - 9.1 (Critical)