Ash-project Ash Graphql vulnerabilities
- ash-project ash graphql Incomplete redaction re-attaches the original error path in AshGraphql, leaking internal field names 6.9 Medium
- ash-project ash graphql Cross-tenant subscription disclosure in AshGraphql authorizes notifications in memory without a tenant-scoped read 7.1 High
- ash-project ash graphql Query-complexity limit bypass via first/last pagination arguments in AshGraphql enables denial of service 8.7 High
- ash-project ash graphql Unhandled KeyError in AshGraphql relay node resolution crashes queries via an unknown type segment 6.9 Medium
- ash-project ash graphql Broken access control in AshGraphql subscription batcher applies authorization suppression to only the first notification 2.3 Low
- ash-project ash graphql Re-entrant synchronous publish in AshGraphql subscription batcher delivers one subscriber's records to another's topic 2.3 Low