ash_authentication_phoenix
2.17.4
Phoenix integration for Ash Authentication
Current section
3 Advisories
Jump to
Current section
3 Advisories
Revoked session accepted because the session jti is never checked in AshAuthentication and AshAuthentication Phoenix
Affected Versions
References
- https://cna.erlef.org/cves/CVE-2026-86533.html
- https://github.com/team-alembic/ash_authentication/commit/a3f49f758f013d2ff086dd9c5ef2d94e921711b4
- https://github.com/team-alembic/ash_authentication/commit/e28e911caa9728d76329afdb0fb26742ffe4eeef
- https://github.com/team-alembic/ash_authentication/commit/fcaeb73f76f8f2e9aef8bf637690d2a20dd97596
- https://github.com/team-alembic/ash_authentication/security/advisories/GHSA-w374-hvrx-66hg
- https://github.com/team-alembic/ash_authentication_phoenix/commit/0135217e34e621dac79ae3d9559aeee49304b0aa
- https://github.com/team-alembic/ash_authentication_phoenix/commit/a3253fb4fc7145aeb403537af1c24d3a8d51ffb1
- https://github.com/team-alembic/ash_authentication_phoenix/commit/f7ab005a2aac09707a25521653c94893d328cc52
- https://github.com/team-alembic/ash_authentication_phoenix/security/advisories/GHSA-m6x4-4gvp-xwjr
- https://hex.pm/packages/ash_authentication
- https://hex.pm/packages/ash_authentication_phoenix
Single-use sign-in token placed in a redirect query string in AshAuthenticationPhoenix
Affected Versions
References
- https://cna.erlef.org/cves/CVE-2026-81632.html
- https://github.com/team-alembic/ash_authentication/commit/8d8ddd25c69b669a92a701af74bff42e1aada998
- https://github.com/team-alembic/ash_authentication/commit/bbf345c1bb7aa28bce5dd856ac0ed2427f103859
- https://github.com/team-alembic/ash_authentication/commit/eca8cadea0f1595ed2c10a0c177b1da9aa9e5269
- https://github.com/team-alembic/ash_authentication/security/advisories/GHSA-j726-59hm-r46r
- https://github.com/team-alembic/ash_authentication_phoenix/commit/903f3a386e1aba2f7b070187ef6f31215a92bdfd
- https://github.com/team-alembic/ash_authentication_phoenix/commit/920257d0460b9c7cbb42a83d0888c10f4eeeb88a
- https://github.com/team-alembic/ash_authentication_phoenix/commit/ff5ad8737748afed9cdfde3ec3a05b8a4702a742
- https://github.com/team-alembic/ash_authentication_phoenix/security/advisories/GHSA-8jh5-339h-mqx9
- https://hex.pm/packages/ash_authentication
- https://hex.pm/packages/ash_authentication_phoenix
Missing Session Revocation on Logout in ash_authentication_phoenix
Affected Versions
References
- https://cna.erlef.org/cves/CVE-2025-4754.html
- https://github.com/team-alembic/ash_authentication_phoenix
- https://github.com/team-alembic/ash_authentication_phoenix/commit/05ab4f438bf0cd0fdfb279d912bbe0d2c3620e02
- https://github.com/team-alembic/ash_authentication_phoenix/commit/a3253fb4fc7145aeb403537af1c24d3a8d51ffb1
- https://github.com/team-alembic/ash_authentication_phoenix/pull/634
- https://github.com/team-alembic/ash_authentication_phoenix/security/advisories/GHSA-f7gq-h8jv-h3cq
- https://hex.pm/packages/ash_authentication_phoenix
- https://nvd.nist.gov/vuln/detail/CVE-2025-4754
- https://osv.dev/vulnerability/EEF-CVE-2025-4754
Checksum
Dependency Config
mix.exs
rebar.config
Gleam
erlang.mk
Package Details
this version
95 544
yesterday
4 186
last 7 days
28 166
all time
951 860
