CVE-2025-6532: ash_authentication sign-in token GET-only exposes credential in URL
Security Advisory
CVE-2025-6532
Low
Ash Authentication
Affected:
- ash_authentication >= 3.10.5, <= 4.14.2
- ash_authentication >= 5.0.0-rc.0, <= 5.0.0-rc.13
Fixed in:
- 4.15.0
- 5.0.0-rc.14
Referenced CVEs:
CVE-2026-81632 · 7.2
文章内图片已隐藏以节省流量 · Upgrade to Pro to view images & offline archive
This content was auto-fetched from github.com, cleaned by our LLM pipeline, and translated to English. View original.