10 matches found
CVE-2026-85500
This is an authentication bypass in AshAuthentication (team-alembic, Elixir), rated CVSS 9.1 CRITICAL . The require_confirmed_with check in check_user/2 uses is_nil(Map.get(user, value)); when the attribute is not selected or hidden by a field policy, Map.get/2 returns %Ash.NotLoaded{} or %Ash.Fo...
EUVD-2023-0331
Malicious code in bioql PyPI...
Duplicate Advisory: Ecto lacks a protection mechanism
Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-2xxx-fhc8-9qvq. This link is maintained to preserve external references. Original Description Ecto 2.2.0 lacks a certain protection mechanism associated with the interaction between isnil and raise...
GHSA-4R2F-6FM9-2QGH Duplicate Advisory: Ecto lacks a protection mechanism
Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-2xxx-fhc8-9qvq. This link is maintained to preserve external references. Original Description Ecto 2.2.0 lacks a certain protection mechanism associated with the interaction between isnil and raise...
CVE-2017-20166
Ecto 2.2.0 lacks a certain protection mechanism associated with the interaction between isnil and raise...
CVE-2017-20166
Ecto 2.2.0 lacks a certain protection mechanism associated with the interaction between isnil and raise...
CVE-2017-20166
Ecto 2.2.0 lacks a certain protection mechanism associated with the interaction between isnil and raise...
CVE-2017-20166: Improper Check for Unusual or Exceptional Conditions
Ecto 2.2.0 lacks a certain protection mechanism associated with the interaction between isnil and raise...
CVE-2017-20166
CVE-2017-20166 affects Ecto 2.2.0, describing a lack of a protection mechanism in the interaction between is_nil and raise. The surrounding entries (NVD, Red Hat, OSV, GHSA duplicates, CNNVD, CVE records) consistently reference this issue with Ecto 2.2.0 and do not provide concrete exploit detail...
