Sensitive Information Exposure in ash_typescript by ash-project

CVE-2026-77950

What is CVE-2026-77950?

An issue exists in ash_typescript where improper error handling can lead to the generation of error messages containing sensitive internal data. This vulnerability allows unauthenticated attackers to exploit the application by provoking error scenarios that do not match the expected error shapes in the configured error handler. When such errors arise, the application fails to redact sensitive information, resulting in the exposure of potentially confidential data. Misconfigurations in error handling can inadvertently reveal internal states, making it essential for developers to implement robust error management processes and keep their applications up to date.

References