CVE-2026-77831

AshPaperTrail (an Elixir library from the ash-project ecosystem) contains an inefficient algorithmic complexity vulnerability in its full-diff list change tracking component (AshPaperTrail.ChangeBuilders.FullDiff.ListChange). The root cause is a cubic-time algorithm: when pairing prior array elem...

CVE-2026-77970

ash_paper_trail (ash-project), an audit/versioning library for the Ash framework, is vulnerable to cleartext storage of sensitive information in versions from 0.3.0 before 0.7.0 . The sensitive_attributes :redact and :ignore mechanisms only apply to a tracked resource's top-level attributes . Bec...