Open Redirect Vulnerability in ash_typescript by Ash Project

CVE-2026-82731

What is CVE-2026-82731?

An Open Redirect vulnerability in ash_typescript allows an attacker to manipulate a path-parameter value. By redirecting a client's request to an untrusted site, the attacker can gain access to sensitive information. The vulnerability arises from the lack of proper encoding in URL builders, allowing raw values, including malicious ones, to be processed unsafely. Attackers can exploit this flaw to reroute requests to a controlled malicious host, potentially compromising user credentials.

References