ash_authentication_phoenix vulnerabilities

2 known vulnerabilities in ash_authentication_phoenix from Team-alembic. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.1 Critical severity

  Insufficient Session Expiration vulnerability in team-alembic AshAuthentication and…

  CVE-2026-86533Sep 17, 2026Team-alembic

  Insufficient Session Expiration vulnerability in team-alembic AshAuthentication and AshAuthentication Phoenix allows a revoked session to remain fully authenticated. A resource configured with session_identifier :jti and require_token_presence_for_authenticati

• 7.2 High severity

  ash_authentication_phoenix: Use of HTTP Request With Sensitive Query String

  CVE-2026-81632Sep 17, 2026Team-alembic

  Use of HTTP Request With Sensitive Query String vulnerability in team-alembic AshAuthenticationPhoenix allows someone able to read access logs, proxy logs or browser history to recover a single-use sign-in token and authenticate as its owner. After a successfu