Ash-project

Path traversal in AshAdmin file uploads via unsanitized client filename

Ash-project Ash Authentication Oauth2 Server: Allocation of Resources Without Limits or Throttling

Unbounded atom creation from client-supplied RPC field names in AshTypescript field formatter

Ash-project Ash Graphql: Allocation of Resources Without Limits or Throttling

Unbounded atom creation from typed struct field names in AshTypescript field selector

AshLua read operation aggregate bypasses the exposed-field allow-list, exposing private attributes

Ash-project Ash Admin: Reliance on Cookies without Validation and Integrity Checking

Stored XSS in AshAdmin relationship typeahead via unescaped label_field content

Authorization-redacted field values disclosed through AshTypescript result normalization

Filter expression injection via forged keyset pagination cursor in Ash

also in 1 other product

Ash-project Ash Authentication Oauth2 Server: Improper Protection of Alternate Path

Ash-project Ash Authentication Oauth2 Server: Improper Authentication

AshAdmin LiveView events intern atoms from client input, exhausting the atom table (node DoS)

Ash-project Ash Authentication Oauth2 Server: Improper Encoding or Escaping of Output

Ash-project Ash Authentication Oauth2 Server: Server-Side Request Forgery (SSRF)

Ash-project Ash Authentication Oauth2 Server: Use of Cache Containing Sensitive Information

Declared argument constraints not enforced on AshTypescript typed controller routes

Ash-project Ash AI: Authorization Bypass Through User-Controlled Key

Authorization bypass when bypass policy condition evaluates to true

Filtering an :atom attribute with unsafe_to_atom? can exhaust the BEAM atom table in Ash

Incomplete redaction re-attaches the original error path in AshGraphql, leaking internal field names

Unhandled KeyError in AshGraphql relay node resolution crashes queries via an unknown type segment

Broken access control in AshPhoenix SubdomainHook via a nil tenant in handle_subdomain

Ash-project Ash AI: Generation of Error Message Containing Sensitive Information

RPC error handler fails open in AshTypescript, disclosing unredacted errors