CVE-2026-81632 Single-use sign-in token placed in a redirect query string in AshAuthenticationPhoenix

[
  {
    "collectionURL": "https://repo.hex.pm",
    "cpes": [
      "cpe:2.3:a:team-alembic:ash_authentication_phoenix:*:*:*:*:*:*:*:*"
    ],
    "defaultStatus": "unaffected",
    "modules": [
      "'Elixir.AshAuthentication.Phoenix.Components.Password.SignInForm'"
    ],
    "packageName": "ash_authentication_phoenix",
    "packageURL": "pkg:hex/ash_authentication_phoenix",
    "product": "ash_authentication_phoenix",
    "programFiles": [
      "lib/ash_authentication_phoenix/components/password/sign_in_form.ex"
    ],
    "programRoutines": [
      {
        "name": "'Elixir.AshAuthentication.Phoenix.Components.Password.SignInForm':handle_event/3"
      },
      {
        "name": "'Elixir.AshAuthentication.Phoenix.Components.Password.SignInForm':get_redirect_path/3"
      },
      {
        "name": "'Elixir.AshAuthentication.Phoenix.Components.Password.SignInForm':get_auth_path_params/2"
      }
    ],
    "repo": "https://github.com/team-alembic/ash_authentication_phoenix",
    "vendor": "team-alembic",
    "versions": [
      {
        "lessThan": "2.17.4",
        "status": "affected",
        "version": "1.7.0",
        "versionType": "semver"
      },
      {
        "lessThan": "3.0.0-rc.11",
        "status": "affected",
        "version": "3.0.0-rc.0",
        "versionType": "semver"
      }
    ]
  },
  {
    "collectionURL": "https://github.com",
    "cpes": [
      "cpe:2.3:a:team-alembic:ash_authentication_phoenix:*:*:*:*:*:*:*:*"
    ],
    "defaultStatus": "unaffected",
    "modules": [
      "'Elixir.AshAuthentication.Phoenix.Components.Password.SignInForm'"
    ],
    "packageName": "team-alembic/ash_authentication_phoenix",
    "packageURL": "pkg:github/team-alembic/ash_authentication_phoenix",
    "product": "ash_authentication_phoenix",
    "programFiles": [
      "lib/ash_authentication_phoenix/components/password/sign_in_form.ex"
    ],
    "programRoutines": [
      {
        "name": "'Elixir.AshAuthentication.Phoenix.Components.Password.SignInForm':handle_event/3"
      },
      {
        "name": "'Elixir.AshAuthentication.Phoenix.Components.Password.SignInForm':get_redirect_path/3"
      },
      {
        "name": "'Elixir.AshAuthentication.Phoenix.Components.Password.SignInForm':get_auth_path_params/2"
      }
    ],
    "repo": "https://github.com/team-alembic/ash_authentication_phoenix",
    "vendor": "team-alembic",
    "versions": [
      {
        "changes": [
          {
            "at": "920257d0460b9c7cbb42a83d0888c10f4eeeb88a",
            "status": "unaffected"
          },
          {
            "at": "ff5ad8737748afed9cdfde3ec3a05b8a4702a742",
            "status": "unaffected"
          }
        ],
        "lessThan": "*",
        "status": "affected",
        "version": "903f3a386e1aba2f7b070187ef6f31215a92bdfd",
        "versionType": "git"
      }
    ]
  },
  {
    "collectionURL": "https://repo.hex.pm",
    "cpes": [
      "cpe:2.3:a:team-alembic:ash_authentication:*:*:*:*:*:*:*:*"
    ],
    "defaultStatus": "unaffected",
    "packageName": "ash_authentication",
    "packageURL": "pkg:hex/ash_authentication",
    "product": "ash_authentication",
    "repo": "https://github.com/team-alembic/ash_authentication",
    "vendor": "team-alembic",
    "versions": [
      {
        "lessThan": "4.15.0",
        "status": "affected",
        "version": "3.10.5",
        "versionType": "semver"
      },
      {
        "lessThan": "5.0.0-rc.14",
        "status": "affected",
        "version": "5.0.0-rc.0",
        "versionType": "semver"
      }
    ]
  },
  {
    "collectionURL": "https://github.com",
    "cpes": [
      "cpe:2.3:a:team-alembic:ash_authentication:*:*:*:*:*:*:*:*"
    ],
    "defaultStatus": "unaffected",
    "packageName": "team-alembic/ash_authentication",
    "packageURL": "pkg:github/team-alembic/ash_authentication",
    "product": "ash_authentication",
    "repo": "https://github.com/team-alembic/ash_authentication",
    "vendor": "team-alembic",
    "versions": [
      {
        "changes": [
          {
            "at": "bbf345c1bb7aa28bce5dd856ac0ed2427f103859",
            "status": "unaffected"
          },
          {
            "at": "8d8ddd25c69b669a92a701af74bff42e1aada998",
            "status": "unaffected"
          }
        ],
        "lessThan": "*",
        "status": "affected",
        "version": "eca8cadea0f1595ed2c10a0c177b1da9aa9e5269",
        "versionType": "git"
      }
    ]
  }
]