Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: team-alembic ash_authentication_phoenix 2.17.4, 3.0.0-rc.11 Clear all filters
TI-2026-56294 CVE-2026-81632

Single-use sign-in token placed in a redirect query string in AshAuthenticationPhoenix

Priority LOW 33

Use of HTTP Request With Sensitive Query String vulnerability in team-alembic AshAuthenticationPhoenix allows someone able to read access logs, proxy logs or browser history to recover a single-use sign-in token and auth…

CVSS 4.0HIGH 7.2 Local Low privileges No interaction EPSS 0.00211 Published 2026-09-17 Fixed in 2.17.4, 3.0.0-rc.11 +2 CWE-598