CVE-2026-81322: Ash Cloak Argument Sensitive Missing

Plaintext action argument inherits sensitivity from source attribute instead of enforcing `sensitive?: true`, risking cleartext exposure in logs, inspect dumps, and error reports.

Provally CuratedPublic repositoryMediumMedium confidenceVerifiedApache-2.0Elixir
greprules fetch cve-2026-81322-ash-cloak-argument-sensitive-missing --engine opengrep

Description

Plaintext action argument inherits sensitivity from source attribute instead of enforcing `sensitive?: true`, risking cleartext exposure in logs, inspect dumps, and error reports.