ash_postgres vulnerabilities (Hex)
4 vulnerabilities.
-
ash_postgresHex AshPostgres ignores attribute multitenancy on the join resource when loading many_to_many and through relationships, returning records related through other tenants' rows 6.0 Medium -
ash_postgresHex AshPostgres returns another tenant's record for a skipped upsert when return_skipped_upsert? is set 6.0 Medium -
ash_postgresHex rename_tenant returns :ok on a failed rename, enabling cross-tenant access in AshPostgres 7.2 High -
ash_postgresHex AshPostgres empty, atomic, non-bulk actions, policy bypass for side-effects vulnerability. 5.3 Medium