CVE-2026-77831

Name of the Vulnerable Software and Affected Versions ash paper trail versions 0.1.1 through 0.6.9

Description An inefficient algorithmic complexity issue exists when using full-diff change tracking. A user can trigger a denial of service by submitting a large array attribute to a create or update action. The AshPaperTrail.ChangeBuilders.FullDiff.ListChange function pairs prior array elements against a new list by rebuilding the remaining-elements accumulator using acc ++ [tuple] at every step. This process copies the growing list repeatedly, causing the pairing to scale cubically relative to the array length. Since there is no bound on the length of the {:array, } attribute, a single request can lead to excessive CPU usage and multi-gigabyte memory allocations.

Recommendations Update ash paper trail to version 0.7.0 or later. As a temporary mitigation, restrict the maximum length of array attributes accepted in create or update actions or avoid using the change tracking mode :full diff configuration.