ash_graphql vulnerabilities (Hex)
6 vulnerabilities.
-
ash_graphqlHex Incomplete redaction re-attaches the original error path in AshGraphql, leaking internal field names 6.9 Medium -
ash_graphqlHex Cross-tenant subscription disclosure in AshGraphql authorizes notifications in memory without a tenant-scoped read 7.1 High -
ash_graphqlHex Query-complexity limit bypass via first/last pagination arguments in AshGraphql enables denial of service 8.7 High -
ash_graphqlHex Unhandled KeyError in AshGraphql relay node resolution crashes queries via an unknown type segment 6.9 Medium -
ash_graphqlHex Broken access control in AshGraphql subscription batcher applies authorization suppression to only the first notification 2.3 Low -
ash_graphqlHex Re-entrant synchronous publish in AshGraphql subscription batcher delivers one subscriber's records to another's topic 2.3 Low