Skip to main content
cve.nowby Sazabi
← Hex
HexPackage

ash_paper_trail

3 known vulnerabilities (2 medium, 1 low), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
3 · 2 medium, 1 low
Registry
Hex

Advisories 3

  • Algorithmic-complexity denial of service in AshPaperTrail full-diff list tracking

    Affected: from 0.1.1, fixed in 0.7.0; from 0.1.1, fixed in 0.7.0.

  • CVE-2026-77970Medium 5.9

    Sensitive fields nested in embedded values are not redacted in AshPaperTrail versions

    Affected: from 0.3.0, fixed in 0.7.0; from 0.3.0, fixed in 0.7.0.

  • CVE-2026-75847Medium 5.9

    Sensitive attribute values stored in a non-sensitive public changes map in AshPaperTrail

    Affected: from 0.1.1, fixed in 0.7.0; from 0.1.1, fixed in 0.7.0.