CVE-2026-86522

Improper Output Neutralization for Logs vulnerability in team-alembic AshAuthentication allows an unauthenticated attacker to forge application log entries by submitting a password reset identity containing newlines or control characters...

CVE-2026-86522: Improper Output Neutralization for Logs

Improper Output Neutralization for Logs vulnerability in team-alembic AshAuthentication allows an unauthenticated attacker to forge application log entries by submitting a password reset identity containing newlines or control characters...

PT-2026-94300

Name of the Vulnerable Software and Affected Versions ash authentication versions 4.2.0 through 4.14.9 ash authentication versions 5.0.0-rc.0 through 5.0.0-rc.13 Description An unauthenticated attacker can forge application log entries by submitting a password reset identity containing newlines o...