PT-2026-83625

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in ash-project ash cloak allows anyone with access to logs, error trackers, or crash reports, or anyone who can trigger a validation error, to recover the plaintext of a field the library encrypts...

PT-2026-83624

Deserialization of Untrusted Data vulnerability in ash-project ash cloak allows an attacker who can influence the bytes of an encrypted column to crash the BEAM node, by triggering unbounded atom creation or a decompression bomb during decryption. AshCloak.Calculations.Decrypt decodes the decrypt...