Ash

Filter expression injection via forged keyset pagination cursor in Ash

also in 1 other product

Authorization bypass when bypass policy condition evaluates to true

Filtering an :atom attribute with unsafe_to_atom? can exhaust the BEAM atom table in Ash

Ash: Authorization Bypass Through User-Controlled Key

Ash: Uncontrolled Resource Consumption

also in 1 other product

Ash: Insufficient Granularity of Access Control

Ash.count, Ash.exists and Ash.aggregate skip related resources' read policies in filters and sorts

Bypass and runtime policies that can never pass may be incorrectly applied in filter authorization

Ash: Incorrect Authorization

Memory exhaustion via unbounded deserialization of keyset pagination cursors in Ash.Page.Keyset

also in 1 other product

Private action arguments can be set by user input on the bulk destroy and bulk update paths in Ash

Ash: Improper Validation of Specified Quantity in Input

Ash: Integer Overflow or Wraparound

Ash.Policy.Authorizer returns records denied by a runtime read policy to any actor

Ash: Incorrect Authorization

Ash: Uncontrolled Resource Consumption

Ash.Type.UUIDv7 accepts non-v7 UUIDs that then fail to load, causing persistent denial of service

Match regex runs on over-length input in Ash.Type.String, enabling regex denial of service

Ash: Missing Authorization

Ash: Improper Access Control

Before action hooks may execute in certain scenarios despite a request being forbidden

Private action arguments can be set by user input in Ash

Ash.Reactor change step fails open, skipping a change when its where guard raises

Ash.Type.Union with :map_with_tag does not force the tag on dump, enabling tag confusion

Non-finite Infinity/NaN decimal values bypass bounds constraints in Ash.Type.Decimal