Product by Ash-project
Ash Phoenix
4 known vulnerabilities in Ash Phoenix (Ash-project), 0 of them actively exploited (CISA KEV).
Key figures
4
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
0
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2026-82724 | Broken access control in AshPhoenix SubdomainHook via a nil tenant in handle_subdomain | — | |
| Medium | CVE-2026-82726 | AshPhoenix get_subdomain maps a crafted or differently-cased Host header to an arbitrary tenant | — | |
| Low | CVE-2026-82727 | AshPhoenix Form.Auto leaks submitted params in an unknown _union_type error message | — | |
| Low | CVE-2026-82725 | Ash-project Ash Phoenix: Authorization Bypass Through User-Controlled Key | — |