Skip to content

Product

hex ash_authentication_phoenix vulnerabilities

1 published CVE affecting hex ash_authentication_phoenix, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
1
Critical
0
High
0
Medium
0
Low
1
Unscored
0
CISA KEV
0

Latest hex ash_authentication_phoenix CVEs

Newest publication first

  1. CVE-2025-4754 Missing Session Revocation on Logout in ash_authentication_phoenix

    Published
    LowCVSS 2.3 EPSS 0.52%

    Insufficient Session Expiration vulnerability in team-alembic ash_authentication_phoenix allows a session token captured before sign-out to remain usable afterwards. The default sign_out/2 that AshAuthentication.Phoenix.Controller injects into an application's auth controller onl...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.