Packages

ash_cloak

0.4.0
0.4.0 0.3.1 0.3.0 0.2.1 0.2.0 0.1.7 0.1.6 0.1.5 0.1.4 0.1.3 0.1.2 0.1.1 0.1.0 0.1.0-rc.0

An Ash extension to seamlessly encrypt and decrypt resource attributes.

HexDocs Report package

Current section

2 Advisories

Jump to
Documentation
Changelog
14 Versions
1 Dependency
1 Dependant
2 Advisories
Files
Activity
EEF-CVE-2026-81322 CVE-2026-81322 GHSA-qp4v-vvrg-8ggx

Cloaked plaintext leaks through a non-sensitive action argument in AshCloak

August 30, 2026
CVSS
?
2.1 / 10.0 Low
CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

Affected Versions

>= 0.1.0 and < 0.4.0
EEF-CVE-2026-81319 CVE-2026-81319 GHSA-rc26-mrm2-6pf9

Unsafe deserialization of decrypted terms enables node DoS in AshCloak

August 30, 2026
CVSS
?
5.9 / 10.0 Medium
CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

Affected Versions

>= 0.1.0 and < 0.4.0

Checksum

Dependency Config

mix.exs

rebar.config

Gleam

erlang.mk

Package Details

Downloads Last 30 days, all versions
0 500 1000 1500 2000

this version

50 013

yesterday

2 334

last 7 days

12 928

all time

264 614

Last Updated

Aug 30, 2026

License

MIT

Build Tools

mix

Publisher

ash-project ash-project

Links

Owners