20 matches found
EEF-CVE-2026-78693 Incomplete redaction re-attaches the original error path in AshGraphql, leaking internal field names
Summary Generation of Error Message Containing Sensitive Information vulnerability in ash-project ashgraphql allows a remote client to read internal field names that an application configured its errorhandler to redact. In AshGraphql.Errors, each error is passed to the configured errorhandler and...
6.9CVSS5.9AI score0.00524EPSS
SaveExploits0References4
20