Lucene search
+L

2 matches found

Github Security Blog
Github Security Blog
added 2025/02/11 6:12 p.m.19 views

Ash Authentication has flawed token revocation checking logic in actions generated by `mix ash_authentication.install`

Impact Applications which have been bootstrapped by the new igniter installer since AshAuthentication v4.1.0 and who have used the magic link strategy, password resets, confirmation, or are manually revoking tokens are affected by revoked tokens being allowed to verify as valid. If you did not us...

6.5CVSS6.5AI score0.00312EPSS
SaveExploits1References4Affected Software1
OSV
OSV
added 2025/02/11 6:12 p.m.20 views

GHSA-QRM9-F75W-HG4C Ash Authentication has flawed token revocation checking logic in actions generated by `mix ash_authentication.install`

Impact Applications which have been bootstrapped by the new igniter installer since AshAuthentication v4.1.0 and who have used the magic link strategy, password resets, confirmation, or are manually revoking tokens are affected by revoked tokens being allowed to verify as valid. If you did not us...

6.3CVSS6.5AI score0.00312EPSS
SaveExploits1References4
Rows per page
Query Builder