Read the docs

ash-project

Records91All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high24CVSS 7.0–8.9

Exploited now

ash-project records in CISA KEV

No ash-project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

3 records in Ash Framework · all components

Priority HIGH 68

Deserialization of Untrusted Data vulnerability in ash-project ash allows an unauthenticated attacker to inject a filter expression through a forged keyset pagination cursor, resulting in SQL injection or code execution…

CVSS 4.0HIGH 7.5 Local No auth No interaction EPSS 0.00611 Published 2026-08-12 Fixed in 3.31.3 CWE-502
Open these records in search →