Skip to contentAsh-project Ash vulnerabilities
- ash-project ash adminAshAdmin composite primary key decoding accepts arbitrary fields, enabling a secret-attribute oracleCVE-2026-81853Fix available2.3 Low
- ash-project ash adminAshAdmin ships a hardcoded CSP nonce, allowing nonce-based CSP bypassCVE-2026-81852Fix available2.1 Low
- ash-project ash adminQuery-parameter injection in AshAdmin row-action links via unencoded string primary keysCVE-2026-82681Fix available2.0 Low
- ash-project ash adminStored XSS in AshAdmin relationship typeahead via unescaped label_field contentCVE-2026-77850Fix available8.4 High
- ash-project ash adminAshAdmin LiveView events intern atoms from client input, exhausting the atom table (node DoS)CVE-2026-82722Fix available8.3 High
- ash-project ash adminAshAdmin cookie reader matches names by substring, enabling actor/session shadowing from a sibling subdomainCVE-2026-75757Fix available8.3 High
- ash-project ash aiAshAi vectorize change leaks raw embedding-provider errors, including credentials, in a user-facing errorCVE-2026-75760Fix available7.1 High
- ash-project ash aiAshAi echoes raw tool exception messages into the conversation, disclosing internal detailsCVE-2026-82580Fix available5.3 Medium
- ash-project ash aiAshAi tool loop never terminates when all tool calls are filtered out, enabling denial of serviceCVE-2026-82579Fix available6.0 Medium
- ash-project ash aiIdentity tool filter in AshAi accepts operator maps, allowing update or destroy of unidentified recordsCVE-2026-82564Fix available7.1 High
- ash-project ash aiMCP DNS-rebinding origin check in AshAi is bypassed by a spoofed X-Forwarded-Proto headerCVE-2026-81315Fix available7.4 High
- ash-project ash aiEEx template evaluation of prompt content in AshAi enables remote code executionCVE-2026-77956Fix available8.9 High
- ash-project ash graphqlIncomplete redaction re-attaches the original error path in AshGraphql, leaking internal field namesCVE-2026-78693Fix available6.9 Medium
- ash-project ash graphqlCross-tenant subscription disclosure in AshGraphql authorizes notifications in memory without a tenant-scoped readCVE-2026-80223Fix available7.1 High
- ash-project ash graphqlQuery-complexity limit bypass via first/last pagination arguments in AshGraphql enables denial of serviceCVE-2026-81636Fix available8.7 High
- ash-project ash graphqlUnhandled KeyError in AshGraphql relay node resolution crashes queries via an unknown type segmentCVE-2026-81633Fix available6.9 Medium
- ash-project ash graphqlBroken access control in AshGraphql subscription batcher applies authorization suppression to only the first notificationCVE-2026-81643Fix available2.3 Low
- ash-project ash graphqlRe-entrant synchronous publish in AshGraphql subscription batcher delivers one subscriber's records to another's topicCVE-2026-82367Fix available2.3 Low
- ash-project ash cloakCloaked plaintext leaks through a non-sensitive action argument in AshCloakCVE-2026-81322Fix available2.1 Low
- ash-project ash cloakUnsafe deserialization of decrypted terms enables node DoS in AshCloakCVE-2026-81319Fix available5.9 Medium
- ash-project ash postgresrename_tenant returns :ok on a failed rename, enabling cross-tenant access in AshPostgresCVE-2026-78699Fix available7.2 High
- ash-project ash sqlexists/2 predicate silently dropped on limited relationships with a parent() filter in AshSqlCVE-2026-77454Fix available5.9 Medium
- ash-project ash sqlSame-named aggregates with differing filters are conflated in AshSqlCVE-2026-81316Fix available2.1 Low
- ash-project ash sqlDistinct-query aggregate drops the tenant schema prefix, leaking across tenants in AshSqlCVE-2026-81318Fix available2.1 Low
- ash-project ash sqlUnescaped backslash allows LIKE wildcard injection in AshSql string searchCVE-2026-78691Fix available2.1 Low
- ash-project ash sqlSQL string_trim removes only spaces, diverging from in-memory trimming in AshSqlCVE-2026-80227Fix available2.1 Low
- ash-project ash obanUnbounded handle_error recursion enables denial of service in AshOban triggersCVE-2026-78228Fix available5.9 Medium
- ash-project ash obanJob argument injection via :args overrides primary_key and tenant in AshObanCVE-2026-78038Fix available5.9 Medium
- ash-project ash sqliteJSON path injection via unescaped get_path segments in AshSqliteCVE-2026-77846Fix available2.1 Low
- ash-project ash paper trailAlgorithmic-complexity denial of service in AshPaperTrail full-diff list trackingCVE-2026-77831Fix available2.1 Low
- ash-project ash paper trailSensitive fields nested in embedded values are not redacted in AshPaperTrail versionsCVE-2026-77970Fix available5.9 Medium
- ash-project ash paper trailSensitive attribute values stored in a non-sensitive public changes map in AshPaperTrailCVE-2026-75847Fix available5.9 Medium
- ash-project ash, ash-hq ash framework +1 moreFilter expression injection via forged keyset pagination cursor in AshCVE-2026-67579Fix available7.5 High
- ash-project ashPredicate injection in manage_relationship belongs_to lookup discloses secret lookup keys in AshCVE-2026-70395Fix available2.1 Low
- ash-project ash, ash-hq ash framework +1 moreMemory exhaustion via unbounded deserialization of keyset pagination cursors in Ash.Page.KeysetCVE-2026-69659Fix available5.9 Medium
- ash-project ashPrivate action arguments can be set by user input in AshCVE-2026-55736Fix available5.9 Medium
- ash-hq ash framework, ash-project ash +1 moreAsh Framework: Ash.Type.Module.cast_input/2 atom exhaustion via unchecked Module.concat allows BEAM VM crashCVE-2026-34593Fix available8.2 High
- ash-project ashAuthorization bypass when bypass policy condition evaluates to trueCVE-2025-48044Fix available8.6 High
- ash-project ashBypass and runtime policies that can never pass may be incorrectly applied in filter authorizationCVE-2025-48043Fix available8.6 High
- ash-project ashBefore action hooks may execute in certain scenarios despite a request being forbiddenCVE-2025-48042Fix available7.1 High
- ash-project ash authentication phoenixMissing Session Revocation on Logout in ash_authentication_phoenixCVE-2025-4754Fix available2.3 Low
- ash framework ashpostgres, ash-project ash postgres +1 moreAshPostgres empty, atomic, non-bulk actions, policy bypass for side-effects vulnerability.CVE-2024-49756Fix available5.3 Medium