.nav-burger { display: none !important; } @media (max-width: 1180px) { /* Match Tailwind's base layer: its important [hidden] reset otherwise wins. */ @layer base { .nav-overlay[hidden] { display: flex !important; } } .nav-overlay[hidden] { position: static; padding: 2rem 1rem; } }

ash_authentication_phoenix 2.10.0 vulnerabilities

3 advisories known · ash_authentication_phoenix@2.10.0 · 2 affect this release · Dependencies not checked

SEVERITYADVISORYPUBLISHED

Affects 2.10.0

SEVERITYADVISORYPUBLISHED

UnknownRevoked session accepted because the session jti is never checked in AshAuthentication and AshAuthentication PhoenixEEF-CVE-2026-86533CVE-2026-86533GHSA-m6x4-4gvp-xwjrAffected >=2.10.0 <2.17.4, >=3.0.0-rc.0 <3.0.0-rc.11Fixed in 2.17.4 Fixed in 3.0.0-rc.11OSV source ↗2 months ago

UnknownSingle-use sign-in token placed in a redirect query string in AshAuthenticationPhoenixEEF-CVE-2026-81632CVE-2026-81632GHSA-8jh5-339h-mqx9Affected >=1.7.0 <2.17.4, >=3.0.0-rc.0 <3.0.0-rc.11Fixed in 2.17.4 Fixed in 3.0.0-rc.11OSV source ↗2 months ago

Does not affect 2.10.0

SEVERITYADVISORYPUBLISHED

Lowash_authentication_phoenix has Insufficient Session ExpirationGHSA-f7gq-h8jv-h3cqCVE-2025-4754EEF-CVE-2025-4754Affected <2.10.0Fixed in 2.10.0OSV source ↗last year