[ Vendor · 5 CVEs ]
ash-project
CVEs affecting ash-project published in the last 30 days, plus any ash-project CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-105283 | 12 Oct 2026 | CVSS 6.3 | ash-project ash_typescriptGeneration of Error Message Containing Sensitive Information vulnerability in ash-project ash_typescript allows an unauthenticated attacker to read… | |
| CVE-2026-101028 | 9 Oct 2026 | CVSS 6.0 | ash-project ashIncorrect Authorization vulnerability in ash-project ash allows an actor to infer data in related records they cannot read via Ash.count/2… | |
| CVE-2026-94201 | 5 Oct 2026 | CVSS 8.2 | ash-project ashAsh stores :atom-typed attributes as strings and compares them as strings. When such an attribute is referenced in a filter, the comparison value is… | |
| CVE-2026-93477 | 25 Sep 2026 | CVSS 5.9 | ash-project ashImproperly Controlled Modification of Dynamically-Determined Object Attributes vulnerability in ash-project ash allows a user to set the value of a… | |
| CVE-2026-55736 | 23 Jun 2026 | CVSS 5.9 | Ash: Private action arguments can be set by user input via string-keyed params and atomic changesetsImproperly Controlled Modification of Dynamically-Determined Object Attributes vulnerability in ash-project ash allows a user to set the value of a… | Fix |