team-alembic ash_authentication

• CVE-2026-110826 Medium 6.3 AshAuthentication log_out_everywhere leaves sessions valid after a password reset or non-atomic password change 0.5%
• CVE-2026-118505 Medium 6.3 AshAuthentication brute_force_strategy does not limit sign-in and request actions defined on the resource 0.6%
• CVE-2026-119215 High 7.6 AshAuthentication TOTP setup lets a user install their own authenticator secret on another user's account 0.5%
• CVE-2026-86688 High 7.4 Session id is not renewed on authentication in ash_authentication, allowing session fixation 0.7%
• CVE-2026-76949 Critical 9.1 Remember-me sign-in guard reads a session key that is never written in ash_authentication, allowing session replacement 0.8%
• CVE-2026-91039 Critical 9.1 dynamic_oidc identities are not namespaced by connection in ash_authentication, allowing cross-connection account takeover 0.7%
• CVE-2026-88952 Critical 9.1 OAuth2 sign-in attached to an existing account without an email comparison in AshAuthentication 0.7%
• CVE-2026-85500 Critical 9.1 `require_confirmed_with` is not enforced on the action and fails open on an unreadable attribute in AshAuthentication 0.8%
• CVE-2026-86533 Critical 9.1 Revoked session accepted because the session jti is never checked in AshAuthentication and AshAuthentication Phoenix 0.9%
• CVE-2026-81632 High 7.2 Single-use sign-in token placed in a redirect query string in AshAuthenticationPhoenix 0.2%
• CVE-2026-80218 High 7.6 Sign-in token minted for one resource accepted by another in AshAuthentication 0.6%
• CVE-2026-78223 Medium 6.9 Token revocation record built from unverified JWT claims in AshAuthentication 0.4%
• CVE-2026-86522 Medium 6.3 Log injection via an unescaped password reset identity in AshAuthentication 0.7%
• CVE-2026-81637 Low 2.3 Replayable OAuth2 CSRF state retained after a failed callback in AshAuthentication 0.6%
• CVE-2026-82761 Critical 9.1 Magic link single-use tokens replayable via TOCTOU race in AshAuthentication 0.6%
• CVE-2026-82685 High 7.6 Confirmation token accepted on any record in AshAuthentication 0.7%
• CVE-2026-82760 High 8.2 Superlinear base62 decoding exhausts CPU and memory in AshAuthentication API key sign-in 0.7%
• CVE-2026-82759 Low 1.8 Reversible IP address pseudonymisation in AshAuthentication audit log hash mode 0.1%
• CVE-2026-82723 Low 1.8 Actor record with password digest stored in AshAuthentication audit log entries 0.2%
• CVE-2026-65633 High 7.6 Purpose-limited JWT accepted as full bearer authentication in AshAuthentication 0.6%
• CVE-2026-66882 Low 2.1 Reflected XSS in AshAuthentication confirmation and magic link interaction forms 0.8%
• CVE-2026-49757 Critical 9.2 OAuth2/OIDC account takeover in AshAuthentication via email-based user matching 0.6%
• CVE-2025-32782 Medium 5.3 Ash Authentication email link auto-click account confirmation vulnerability 0.3%
• CVE-2025-25202 Medium 6.3 Ash Authentication has flawed token revocation checking logic in actions generated by `mix ash_authentication.install` 0.3%