Skip to content
Fencer Vulns

All · hex

Newest first. Every view here is also a feed.

  1. 6.0
    CVE-2026-86338 Ash field policies do not filter-nil forbidden calculations and aggregates, enabling an information-disclosure oracle
    hex
  2. 6.3
    CVE-2026-88255 mpp Tempo keys its pre-broadcast dedup reserve on the caller-supplied transaction encoding, so a re-encoded signed transaction reserves a second slot
    hex
  3. 6.3
    CVE-2026-89186 mpp writes Payment-Receipt and Cache-Control before the wrapped application runs, letting a consumer's own Cache-Control expose paid responses to shared caches
    hex
  4. 9.0
    CVE-2026-77866 SSRF protection bypass in safeurl via IPv6 addresses and unresolvable hosts
    hex
  5. 9.0
    CVE-2026-77972 safeurl validated address is not bound to the request, allowing DNS rebinding
    hex
  6. 6.0
    CVE-2026-78216 AshLua eval read operations can read field-policy-protected fields via aggregates
    hex
  7. 6.0
    CVE-2026-78230 AshAi aggregate tool can read field-policy-protected fields
    hex
  8. 2.3
    CVE-2026-82710 Terminal escape sequence injection in mix usage_rules.search_docs via package documentation metadata
    hex
  9. 2.3
    CVE-2026-82584 Terminal escape sequence injection in the mix igniter.install confirmation prompt via package metadata
    hex
  10. 8.2
    CVE-2026-82586 AshLua read operation aggregate bypasses the exposed-field allow-list, exposing private attributes
    hex
  11. 2.1
    CVE-2026-81638 Non-canonical ULID spellings are accepted and alias to the same record in ash_double_entry
    hex
  12. 6.3
    CVE-2026-82758 ash_authentication_oauth2_server treats an empty resolved secret as valid, opening the gated Dynamic Client Registration endpoint
    hex
  13. 6.3
    CVE-2026-82757 ash_authentication_oauth2_server CIMD fetcher classifies IPv4-in-IPv6 and site-local addresses as public, allowing SSRF
    hex
  14. 6.3
    CVE-2026-82756 ash_authentication_oauth2_server interpolates a tenant-derived value into the WWW-Authenticate challenge without escaping, allowing header parameter injection
    hex
  15. 6.3
    CVE-2026-82755 ash_authentication_oauth2_server serves tenant-specific OAuth metadata as publicly cacheable without Vary, enabling cross-tenant confusion
    hex
  16. 6.3
    CVE-2026-82754 ash_authentication_oauth2_server aliases every protocol endpoint under /.well-known, bypassing path-scoped controls
    hex
  17. 8.2
    CVE-2026-82753 Unauthenticated authorize requests create unbounded, never-expiring CIMD client rows and cache entries in ash_authentication_oauth2_server
    hex
  18. 8.3
    CVE-2026-82750 Unbounded EIP-7702 authorization list in mpp Tempo fee-payer sponsorship inflates gas cost and sponsors account delegation
    hex
  19. 8.3
    CVE-2026-82751 Unbounded key authorization in mpp Tempo fee-payer sponsorship inflates gas cost and sponsors access-key provisioning
    hex
  20. 5.9
    CVE-2026-82752 Ash string length constraints count graphemes, so a combining-mark string of any size passes max_length
    hex
  21. 8.2
    CVE-2026-82728 Unbounded HTTP/1 status-line and chunk-extension buffering in Mint causes memory-exhaustion DoS
    hex
  22. 6.3
    CVE-2026-82729 Quadratic chunk-size parsing in Mint.HTTP1.Parse allows CPU-exhaustion DoS
    hex
  23. 5.9
    CVE-2026-82747 Ash.Policy.Authorizer returns records denied by a runtime read policy to any actor
    hex
  24. 5.9
    CVE-2026-82749 Ash relationship parent(...) filter degrades to an IS NULL match when the parent field is unresolved, leaking scoped records
    hex
  25. 2.1
    CVE-2026-82748 Ash.Actions.Aggregate authorizes an aggregate under one action but computes it under another
    hex
  26. 5.9
    CVE-2026-82746 Ash.update_many/4 atomic path skips resource policy authorization, allowing updates to forbidden records
    hex
  27. 5.9
    CVE-2026-82745 ETS and Mnesia data layers overwrite an existing record on create instead of enforcing primary-key uniqueness
    hex
  28. 2.1
    CVE-2026-82744 Ash.Reactor change step fails open, skipping a change when its where guard raises
    hex
  29. 2.1
    CVE-2026-82743 Ash.Actions.Read.AsyncLimiter busy-spins a scheduler while awaiting slow async reads
    hex
  30. 5.9
    CVE-2026-82742 Ash.Filter.Runtime materializes a combinatorial cross-product over to-many relationships, exhausting memory
    hex