Priority HIGH 68
Deserialization of Untrusted Data vulnerability in ash-project ash allows an unauthenticated attacker to inject a filter expression through a forged keyset pagination cursor, resulting in SQL injection or code execution…
Vulnerabilities
3 records
TI-2026-48952 CVE-2026-69659
Memory exhaustion via unbounded deserialization of keyset pagination cursors in Ash.Page.Keyset
Priority MEDIUM 60
Uncontrolled Resource Consumption vulnerability in ash-project ash allows an attacker to exhaust the memory of the node via a crafted keyset pagination cursor.
TI-2026-26840 CVE-2026-34593 · GHSA-jjf9-w5vj-r6vp
Ash Framework: Ash.Type.Module.cast_input/2 atom exhaustion via unchecked Module.concat allows BEAM VM crash
Priority HIGH 75
Ash Framework is a declarative, extensible framework for building Elixir applications.