https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 29 Sep 2026 23:03:19 +0000 https://db.gcve.eu/vuln/cve-2026-82755 <p><strong>Affected:</strong> ash-project ash_authentication_oauth2_server</p> <p>Use of Cache Containing Sensitive Information vulnerability in ash-project ash_authentication_oauth2_server allows a shared HTTP cache to serve one tenant&#39;s OAuth discovery metadata to another tenant&#39;s clients.</p> <p>The RFC 8414 and RFC 9728 metadata endpoints in AshAuthentication.Phoenix.Oauth2Server.ProtocolRouter return tenant-specific values (issuer, authorization_endpoint, token_endpoint, jwks_uri) when a tenant is set, but sent them with Cache-Control: public, max-age=3600 and no Vary. When the tenant is derived from something other than the URL (a header or the Host) and a shared cache sits in front, the cache key is the URL alone, so a stored response for one tenant is served to another for up to an hour. Affected clients may then send authorization codes and secrets to the wrong tenant&#39;s token endpoint and validate tokens against the wrong keys.</p> <p>This issue affects ash_authentication_oauth2_server: from 0.1.3 before 0.3.1.</p> <p><strong>Affected:</strong> ash-project ash_authentication_oauth2_server</p> <p>Use of Cache Containing Sensitive Information vulnerability in ash-project ash_authentication_oauth2_server allows a shared HTTP cache to serve one tenant&#39;s OAuth discovery metadata to another tenant&#39;s clients.</p> <p>The RFC 8414 and RFC 9728 metadata endpoints in AshAuthentication.Phoenix.Oauth2Server.ProtocolRouter return tenant-specific values (issuer, authorization_endpoint, token_endpoint, jwks_uri) when a tenant is set, but sent them with Cache-Control: public, max-age=3600 and no Vary. When the tenant is derived from something other than the URL (a header or the Host) and a shared cache sits in front, the cache key is the URL alone, so a stored response for one tenant is served to another for up to an hour. Affected clients may then send authorization codes and secrets to the wrong tenant&#39;s token endpoint and validate tokens against the wrong keys.</p> <p>This issue affects ash_authentication_oauth2_server: from 0.1.3 before 0.3.1.</p> https://db.gcve.eu/vuln/cve-2026-82755