PT-2026-86925

Use of Cache Containing Sensitive Information vulnerability in ash-project ash authentication oauth2 server allows a shared HTTP cache to serve one tenant's OAuth discovery metadata to another tenant's clients. The RFC 8414 and RFC 9728 metadata endpoints in...

CVE-2026-48901: Use of Cache Containing Sensitive Information

The InputFilter::getInstance method omitted a security sensitive parameter from the instance cache key...