T
Üretici güvenlik profili
team-alembic
Ürün portföyü, yama kanıtları ve sömürü sinyalleri tek güvenlik karnesinde
Veriler CVE Programı, NVD, CISA KEV ve üretici güvenlik bültenlerinden birleştirilir.
Toplam CVE19
Kritik6
CISA KEV0
Public exploit2
Yama oranı%100
Ort. CVSS6.5
12 aylık açık hızı
0
0
0
0
0
0
0
0
0
2
16
0
CVE KEV
CVE önem dağılımı
19toplam CVE
Kritik6 (32%)
Yüksek6 (32%)
Orta2 (11%)
Düşük5 (26%)
Yama ve sömürü görünümü
%100
Doğrulanmış yama
%0
CISA KEV
%11
Public exploit
19Yama var
0Kısmi
0Geçici çözüm
0Üretici: yama yok
0Bilinmiyor
Son güvenlik açıkları
7.4
CVE-2026-86688
Session id is not renewed on authentication in ash_authentication, allowing session fixation
T
Yama doğrulandıEPSS %1
9.1
CVE-2026-76949
Remember-me sign-in guard reads a session key that is never written in ash_authentication, allowing session replacement
T
Yama doğrulandıEPSS %1
9.1
CVE-2026-91039
dynamic_oidc identities are not namespaced by connection in ash_authentication, allowing cross-connection account takeover
T
Yama doğrulandıEPSS %1
9.1
CVE-2026-88952
OAuth2 sign-in attached to an existing account without an email comparison in AshAuthentication
T
Yama doğrulandıEPSS %1
9.1
CVE-2026-85500
`require_confirmed_with` is not enforced on the action and fails open on an unreadable attribute in AshAuthentication
T
Yama doğrulandıEPSS %1
9.1
CVE-2026-86533
Revoked session accepted because the session jti is never checked in AshAuthentication and AshAuthentication Phoenix
T
Yama doğrulandıEPSS %1
7.2
CVE-2026-81632
Single-use sign-in token placed in a redirect query string in AshAuthenticationPhoenix
T
Yama doğrulandıEPSS %0
7.6
CVE-2026-80218
Sign-in token minted for one resource accepted by another in AshAuthentication
T
Yama doğrulandıEPSS %1
6.9
CVE-2026-78223
Token revocation record built from unverified JWT claims in AshAuthentication
T
Yama doğrulandıEPSS %0
6.3
CVE-2026-86522
Log injection via an unescaped password reset identity in AshAuthentication
T
Yama doğrulandıEPSS %1