AIKIDO-2026-746686

TL;DR

AshPaperTrail generates a version resource whose changes map stores the values of tracked attributes. The transformer computed the sensitive? flag for that changes attribute from ignore_attributes instead of the attributes actually persisted, so with the default empty ignore list the flag was always false. As a result the changes map was declared public and non-sensitive even when it held values copied from sensitive? attributes, exposing secrets such as tokens, password hashes, and PII through the version resource's default read action, logs, inspect output, and error messages. The fix computes sensitivity from the tracked attributes so the changes attribute is marked sensitive when it can contain sensitive data.