ash_authentication
Hex · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| AshAuthentication vulnerable to OAuth2/OIDC account takeover via email-based user matching | ash_authentication | Hex | Critical | Fix reported | |
| ash_authentication has email link auto-click account confirmation vulnerability | ash_authentication | Hex | Medium | Fix reported | |
| Ash Authentication has flawed token revocation checking logic in actions generated by `mix ash_authentication.install` | ash_authentication | Hex | Medium | Fix reported |