EUVD-2026-68216

browser-use web-ui versions 2.0.0 through 3.0.0 write configured LLM API keys to disk in cleartext without encryption or access restrictions. Attackers with read access to the temporary settings directory can recover provider API keys from predictably-named JSON files...

CVE-2026-82640 browser-use web-ui 2.0.0 through 3.0.0 Cleartext API Key Storage

browser-use web-ui versions 2.0.0 through 3.0.0 write configured LLM API keys to disk in cleartext without encryption or access restrictions. Attackers with read access to the temporary settings directory can recover provider API keys from predictably-named JSON files...

CVE-2026-82640 browser-use web-ui 2.0.0 through 3.0.0 Cleartext API Key Storage

browser-use web-ui versions 2.0.0 through 3.0.0 write configured LLM API keys to disk in cleartext without encryption or access restrictions. Attackers with read access to the temporary settings directory can recover provider API keys from predictably-named JSON files...

CVE-2026-82640

browser-use web-ui versions 2.0.0 through 3.0.0 store configured LLM API keys in cleartext on disk without encryption or access restrictions. The keys are written to predictably-named JSON files in a temporary settings directory, allowing any process or user with local read access to recover prov...

CVE-2026-82640 browser-use web-ui 2.0.0 through 3.0.0 Cleartext API Key Storage

browser-use web-ui versions 2.0.0 through 3.0.0 write configured LLM API keys to disk in cleartext without encryption or access restrictions. Attackers with read access to the temporary settings directory can recover provider API keys from predictably-named JSON files...

CVE-2026-77970

Cleartext Storage of Sensitive Information vulnerability in ash-project ashpapertrail allows an attacker with read access to the generated version resource to recover sensitive values nested inside embedded resources, unions, or lists. sensitiveattributes :redact and :ignore only act on the track...

CVE-2026-75847

Cleartext Storage of Sensitive Information vulnerability in ash-project ashpapertrail allows an attacker with read access to the generated version resource to recover the plaintext of sensitive? attributes. AshPaperTrail stores the values of tracked sensitive? attributes in the generated version...

CVE-2026-77970

Cleartext Storage of Sensitive Information vulnerability in ash-project ashpapertrail allows an attacker with read access to the generated version resource to recover sensitive values nested inside embedded resources, unions, or lists. sensitiveattributes :redact and :ignore only act on the track...

CVE-2026-77970

ash_paper_trail (ash-project), an audit/versioning library for the Ash framework, is vulnerable to cleartext storage of sensitive information in versions from 0.3.0 before 0.7.0 . The sensitive_attributes :redact and :ignore mechanisms only apply to a tracked resource's top-level attributes . Bec...

CVE-2026-77970 Sensitive fields nested in embedded values are not redacted in AshPaperTrail versions

Cleartext Storage of Sensitive Information vulnerability in ash-project ashpapertrail allows an attacker with read access to the generated version resource to recover sensitive values nested inside embedded resources, unions, or lists. sensitiveattributes :redact and :ignore only act on the track...

EEF-CVE-2026-77970 Sensitive fields nested in embedded values are not redacted in AshPaperTrail versions

Summary Cleartext Storage of Sensitive Information vulnerability in ash-project ashpapertrail allows an attacker with read access to the generated version resource to recover sensitive values nested inside embedded resources, unions, or lists. sensitiveattributes :redact and :ignore only act on t...

CVE-2026-77970 Sensitive fields nested in embedded values are not redacted in AshPaperTrail versions

Cleartext Storage of Sensitive Information vulnerability in ash-project ashpapertrail allows an attacker with read access to the generated version resource to recover sensitive values nested inside embedded resources, unions, or lists. sensitiveattributes :redact and :ignore only act on the track...

EUVD-2026-68143

Cleartext Storage of Sensitive Information vulnerability in ash-project ashpapertrail allows an attacker with read access to the generated version resource to recover sensitive values nested inside embedded resources, unions, or lists. sensitiveattributes :redact and :ignore only act on the track...

CVE-2026-77970 Sensitive fields nested in embedded values are not redacted in AshPaperTrail versions

Cleartext Storage of Sensitive Information vulnerability in ash-project ashpapertrail allows an attacker with read access to the generated version resource to recover sensitive values nested inside embedded resources, unions, or lists. sensitiveattributes :redact and :ignore only act on the track...

EUVD-2026-68142

Cleartext Storage of Sensitive Information vulnerability in ash-project ashpapertrail allows an attacker with read access to the generated version resource to recover the plaintext of sensitive? attributes. AshPaperTrail stores the values of tracked sensitive? attributes in the generated version...

CVE-2026-75847

Cleartext Storage of Sensitive Information vulnerability in ash-project ashpapertrail allows an attacker with read access to the generated version resource to recover the plaintext of sensitive? attributes. AshPaperTrail stores the values of tracked sensitive? attributes in the generated version...

CVE-2026-75847

ash_paper_trail (by ash-project) is an Elixir audit/versioning library. The changes map in the generated version resource is declared public? true and sensitive? false because AshPaperTrail.Resource.Transformers.CreateVersionResource derives sensitivity from ignore_attributes (which defaults to e...

CVE-2026-75847 Sensitive attribute values stored in a non-sensitive public changes map in AshPaperTrail

Cleartext Storage of Sensitive Information vulnerability in ash-project ashpapertrail allows an attacker with read access to the generated version resource to recover the plaintext of sensitive? attributes. AshPaperTrail stores the values of tracked sensitive? attributes in the generated version...

EEF-CVE-2026-75847 Sensitive attribute values stored in a non-sensitive public changes map in AshPaperTrail

Summary Cleartext Storage of Sensitive Information vulnerability in ash-project ashpapertrail allows an attacker with read access to the generated version resource to recover the plaintext of sensitive? attributes. AshPaperTrail stores the values of tracked sensitive? attributes in the generated...

CVE-2026-75847 Sensitive attribute values stored in a non-sensitive public changes map in AshPaperTrail

Cleartext Storage of Sensitive Information vulnerability in ash-project ashpapertrail allows an attacker with read access to the generated version resource to recover the plaintext of sensitive? attributes. AshPaperTrail stores the values of tracked sensitive? attributes in the generated version...