https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 21:25:38 +0000 https://vulnerability.circl.lu/vuln/fkie_cve-2026-75847 <p>Cleartext Storage of Sensitive Information vulnerability in ash-project ash_paper_trail allows an attacker with read access to the generated version resource to recover the plaintext of sensitive? attributes.</p> <p>AshPaperTrail stores the values of tracked sensitive? attributes in the generated version resource&#39;s changes map, which is declared public? true and sensitive? false, so the values are returned by the version resource&#39;s default read action and printed in logs, inspect output, and error messages instead of being redacted. AshPaperTrail.Resource.Transformers.CreateVersionResource derives the changes map&#39;s sensitivity from the ignore_attributes list (the attributes excluded from changes) rather than from the tracked attributes actually stored in it, and ignore_attributes defaults to empty, so the flag is effectively always false.</p> <p>This issue affects ash_paper_trail: from 0.1.1 before 0.7.0.</p> <p>Cleartext Storage of Sensitive Information vulnerability in ash-project ash_paper_trail allows an attacker with read access to the generated version resource to recover the plaintext of sensitive? attributes.</p> <p>AshPaperTrail stores the values of tracked sensitive? attributes in the generated version resource&#39;s changes map, which is declared public? true and sensitive? false, so the values are returned by the version resource&#39;s default read action and printed in logs, inspect output, and error messages instead of being redacted. AshPaperTrail.Resource.Transformers.CreateVersionResource derives the changes map&#39;s sensitivity from the ignore_attributes list (the attributes excluded from changes) rather than from the tracked attributes actually stored in it, and ignore_attributes defaults to empty, so the flag is effectively always false.</p> <p>This issue affects ash_paper_trail: from 0.1.1 before 0.7.0.</p> https://vulnerability.circl.lu/vuln/fkie_cve-2026-75847