ash_authentication_phoenix
- Software type
- Software application
- Total vulnerabilities (90 days)
- 2
- Products & ServicesProducts & Services
- SolutionsSolutions
- PricingPricing
- CompanyCompany
- ResourcesResources
en
en
A short verification protects source data and prevents automated AI requests.
Verifying...
As of 11/09/2026, ash_authentication_phoenix recorded 2 security vulnerabilities in the last 90 days, of which 2 are rated High or Critical. None of these vulnerabilities is actively exploited (KEV) according to CISA's catalog. CyStack recommends that organizations and individual users apply patches as soon as possible.
CyStack does not yet have sufficient official-source data to identify the latest version of ash_authentication_phoenix and determine which vulnerabilities affect that version.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
CVE-2026-86533Revoked session accepted because the session jti is never checked in AshAuthentication and AshAuthentication PhoenixCVE-2026-81632Single-use sign-in token placed in a redirect query string in AshAuthenticationPhoenixCVE-2025-4754Missing Session Revocation on Logout in ash_authentication_phoenix| Vulnerability | Exploitation status | Fix | Published | Severity |
|---|---|---|---|---|
CVE-2026-86533Revoked session accepted because the session jti is never checked in AshAuthentication and AshAuthentication Phoenix | Exploitation statusNot exploited | FixYes | Published09/17/2026 | SeverityCritical |
CVE-2026-81632Single-use sign-in token placed in a redirect query string in AshAuthenticationPhoenix | Exploitation statusNot exploited | FixYes | Published09/17/2026 | SeverityHigh |
CVE-2025-4754Missing Session Revocation on Logout in ash_authentication_phoenix | Exploitation statusNot exploited | FixYes | Published06/17/2025 | SeverityLow |
3 Results | Page 1 of 1