CVE-2026-105283

Generation of Error Message Containing Sensitive Information vulnerability in ash-project ashtypescript allows an unauthenticated attacker to read internal Elixir terms from an RPC error response by provoking an error the error builder has no dedicated clause for...

CVE-2026-105283

The ash_typescript library (versions 0.1.0 to 0.19.0 ) is vulnerable to a Generation of Error Message Containing Sensitive Information (CWE-209) vulnerability. An unauthenticated attacker can trigger an error that lacks a specific handling clause in AshTypescript.Rpc.ErrorBuilder.build_error_resp...

CVE-2026-105283 Internal error terms inspected into AshTypescript RPC error responses

Generation of Error Message Containing Sensitive Information vulnerability in ash-project ashtypescript allows an unauthenticated attacker to read internal Elixir terms from an RPC error response by provoking an error the error builder has no dedicated clause for...

EUVD-2026-97336

Generation of Error Message Containing Sensitive Information vulnerability in ash-project ashtypescript allows an unauthenticated attacker to read internal Elixir terms from an RPC error response by provoking an error the error builder has no dedicated clause for...

CVE-2026-105283

Generation of Error Message Containing Sensitive Information vulnerability in ash-project ashtypescript allows an unauthenticated attacker to read internal Elixir terms from an RPC error response by provoking an error the error builder has no dedicated clause for...

CVE-2026-105283 Internal error terms inspected into AshTypescript RPC error responses

Generation of Error Message Containing Sensitive Information vulnerability in ash-project ashtypescript allows an unauthenticated attacker to read internal Elixir terms from an RPC error response by provoking an error the error builder has no dedicated clause for...

CVE-2026-105283 Internal error terms inspected into AshTypescript RPC error responses

Generation of Error Message Containing Sensitive Information vulnerability in ash-project ashtypescript allows an unauthenticated attacker to read internal Elixir terms from an RPC error response by provoking an error the error builder has no dedicated clause for...

PT-2026-110538

Generation of Error Message Containing Sensitive Information vulnerability in ash-project ash typescript allows an unauthenticated attacker to read internal Elixir terms from an RPC error response by provoking an error the error builder has no dedicated clause for...

PT-2026-83510

Summary mcp-searxng version 1.11.0 exposes SearXNG Basic Authentication credentials embedded in the SEARXNG URL environment variable. When the server starts in STDIO mode and an MCP client connects, the complete SEARXNG URL, including its username and password, is sent to the client through an MC...