team-alembic/ash_authentication Security Advisories | GitStock

critical2026-08-25

AshAuthentication vulnerable to OAuth2/OIDC account takeover via email-based user matching

GHSA-777c-2fxx-qr28 · CVE-2026-49757

medium2025-04-14

ash_authentication has email link auto-click account confirmation vulnerability

GHSA-3988-q8q7-p787 · CVE-2025-32782

medium2025-02-11

Ash Authentication has flawed token revocation checking logic in actions generated by `mix ash_authentication.install`

GHSA-qrm9-f75w-hg4c · CVE-2025-25202