AS
Product
ash_paper_trail
3
CVEs
0
On KEV
5.9
Max CVSS
0
New 30D
Severity mix
Critical 0High 0Medium 2Low 1
Watch
Add ash_paper_trail to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-77970 | 5.9 | Aug 30 | Sensitive fields nested in embedded values are not redacted in AshPaperTrail versions Affected: 0.3.0 before 0.7.0; ffe5e03b14d26b73bff17f3eca811591788aba9c before 0cd4acfe7f48397673d8594fb5e2cd0f1bda6e40 |
| CVE-2026-75847 | 5.9 | Aug 30 | Sensitive attribute values stored in a non-sensitive public changes map in AshPaperTrail Affected: 0.1.1 before 0.7.0; e379ca90a0c4db54d07a9d1556fd12f2413f6e98 before 90efdb0769f83f7c5daba6a87758daebf4baf32c |
| CVE-2026-77831 | 2.1 | Aug 30 | Algorithmic-complexity denial of service in AshPaperTrail full-diff list tracking Affected: 0.1.1 before 0.7.0; 449cd2a93416853066378fa61c715e89f80dc854 before e781f5d8840b07d57db99f9a4728298837d7b3a8 |
Showing 3
