Product by Ash-project
Ash SQL
5 known vulnerabilities in Ash SQL (Ash-project), 0 of them actively exploited (CISA KEV).
Key figures
5
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
0
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Medium | CVE-2026-77454 | exists/2 predicate silently dropped on limited relationships with a parent() filter in AshSql | — | |
| Low | CVE-2026-80227 | SQL string_trim removes only spaces, diverging from in-memory trimming in AshSql | — | |
| Low | CVE-2026-78691 | Unescaped backslash allows LIKE wildcard injection in AshSql string search | — | |
| Low | CVE-2026-81316 | Same-named aggregates with differing filters are conflated in AshSql | — | |
| Low | CVE-2026-81318 | Distinct-query aggregate drops the tenant schema prefix, leaking across tenants in AshSql | — |