CWE-1466

AshAuthentication log_out_everywhere leaves sessions valid after a password reset or non-atomic password change

Improper Session Invalidation after Authentication Credential Change vulnerability in team-alembic ash_authentication allows an attacker holding a victim's session token to stay signed in after the victim resets or changes their password…