— Hex
EEF-CVE-2026-49757 · CVE-2026-49757, GHSA-777c-2fxx-qr28 OAuth2/OIDC account takeover in AshAuthentication via email-based user matching
Modified: 6/15/2026
package
pkg:hex/ash_authentication
OAuth2/OIDC account takeover in AshAuthentication via email-based user matching
Modified: 6/15/2026
ash_authentication has email link auto-click account confirmation vulnerability
Modified: 12/10/2025
Ash Authentication has flawed token revocation checking logic in actions generated by `mix ash_authentication.install`
Modified: 12/10/2025