Lucene search
+L

6 matches found

NVD
NVD
added 2026/08/31 2:17 a.m.29 views

CVE-2026-75760

Generation of Error Message Containing Sensitive Information vulnerability in ash-project ashai discloses provider request state and credentials in a user-facing validation error. In AshAi.Changes.Vectorize, when the embedding provider call fails the change added a changeset error whose message...

7.1CVSS0.00283EPSS
SaveExploits0References4
EUVD
EUVD
added 2026/08/31 1:09 a.m.25 views

EUVD-2026-68309

Generation of Error Message Containing Sensitive Information vulnerability in ash-project ashai discloses provider request state and credentials in a user-facing validation error. In AshAi.Changes.Vectorize, when the embedding provider call fails the change added a changeset error whose message...

7.1CVSS5.9AI score0.00283EPSS
SaveExploits0References4
OSV
OSV
added 2026/08/31 1:09 a.m.11 views

CVE-2026-75760 AshAi vectorize change leaks raw embedding-provider errors, including credentials, in a user-facing error

Generation of Error Message Containing Sensitive Information vulnerability in ash-project ashai discloses provider request state and credentials in a user-facing validation error. In AshAi.Changes.Vectorize, when the embedding provider call fails the change added a changeset error whose message...

7.1CVSS5.9AI score0.00283EPSS
SaveExploits0References9
Cvelist
Cvelist
added 2026/08/31 1:09 a.m.39 views

CVE-2026-75760 AshAi vectorize change leaks raw embedding-provider errors, including credentials, in a user-facing error

Generation of Error Message Containing Sensitive Information vulnerability in ash-project ashai discloses provider request state and credentials in a user-facing validation error. In AshAi.Changes.Vectorize, when the embedding provider call fails the change added a changeset error whose message...

7.1CVSS0.00283EPSS
SaveExploits0References4
CVE
CVE
added 2026/08/31 1:09 a.m.29 views

CVE-2026-75760

ash_ai (ash-project, Elixir) contains a sensitive information disclosure in AshAi.Changes.Vectorize . When the embedding provider call fails, the raw error term is inspected into a user-facing changeset error, potentially exposing the request URL , provider response body , and the outbound Author...

7.1CVSS5.9AI score0.00283EPSS
SaveExploits0References4
OSV
OSV
added 2026/08/31 1:09 a.m.18 views

EEF-CVE-2026-75760 AshAi vectorize change leaks raw embedding-provider errors, including credentials, in a user-facing error

Summary Generation of Error Message Containing Sensitive Information vulnerability in ash-project ashai discloses provider request state and credentials in a user-facing validation error. In AshAi.Changes.Vectorize, when the embedding provider call fails the change added a changeset error whose...

7.1CVSS5.8AI score0.00283EPSS
SaveExploits0References4
Rows per page
Query Builder