Product by Ash-project
Ash Typescript
8 known vulnerabilities in Ash Typescript (Ash-project), 0 of them actively exploited (CISA KEV).
Key figures
8
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
0
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2026-74837 | Unbounded atom creation from client-supplied RPC field names in AshTypescript field formatter | — | |
| High | CVE-2026-77856 | Unbounded atom creation from typed struct field names in AshTypescript field selector | — | |
| High | CVE-2026-82730 | Authorization-redacted field values disclosed through AshTypescript result normalization | — | |
| Medium | CVE-2026-82732 | Declared argument constraints not enforced on AshTypescript typed controller routes | — | |
| Medium | CVE-2026-77950 | RPC error handler fails open in AshTypescript, disclosing unredacted errors | — | |
| Medium | CVE-2026-82733 | Route handler return value echoed into AshTypescript error response | — | |
| Medium | CVE-2026-105283 | Internal error terms inspected into AshTypescript RPC error responses | — | |
| Low | CVE-2026-82731 | Unescaped path parameters in AshTypescript generated TypeScript client allow request redirection | — |