{"uuid": "12b526a9-d2ec-4c59-8d7e-f2f18cdd8967", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-85500", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mvpr6u7ppo2x", "content": "CRITICAL: team-alembic ash_authentication (4.3.8 \u2013 4.15.0, 5.0.0-rc.14) lets unconfirmed users bypass email confirmation. Update immediately to secure user sign-in. https://radar.offseq.com/threat/cve-2026-85500-cwe-305-authentication-bypass-by-primary-weakness-in-team-alembic-ashauthentication-c...", "creation_timestamp": "2026-09-17T13:30:31.955066Z"}