CVE-2026-82739

CVE-2026-82739 is a Generation of Error Message Containing Sensitive Information vulnerability in the ash-project ash Elixir framework, specifically in Ash.Resource.Validation.Confirm's atomic implementation. When an actor supplies only a confirmation argument (without the field itself), the mism...

CVE-2026-82739 Ash.Resource.Validation.Confirm leaks a confirmed field's stored value in the atomic mismatch error

Generation of Error Message Containing Sensitive Information vulnerability in ash-project ash discloses the stored value of a confirmed field to an actor who fails its confirmation check. Ash.Resource.Validation.Confirm's atomic implementation atomic/2 in lib/ash/resource/validation/confirm.ex...