Ash-hq vulnerabilities
We track 2 vulnerabilities in Ash-hq products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on August 12, 2026.
2vulnerabilities
0critical
2high
0exploited
7.5average CVSS score
Latest Ash-hq vulnerabilities
- 7.4 High severity
ash: Improper Neutralization of Special Elements used in an SQL Command
Deserialization of Untrusted Data vulnerability in ash-project ash allows an unauthenticated attacker to inject a filter expression through a forged keyset pagination cursor, resulting in SQL injection or code execution depending on the data layer. Read action
- 7.5 High severity
ash: Allocation of Resources Without Limits or Throttling
Ash Framework is a declarative, extensible framework for building Elixir applications. Prior to version 3.22.0, Ash.Type.Module.cast_input/2 unconditionally creates a new Erlang atom via Module.concat([value]) for any user-supplied binary string that starts wi