ash
Hex · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| Ash: Private action arguments can be set by user input via string-keyed params and atomic changesets | ash | Hex | Medium | Fix reported | |
| Ash.Type.Module.cast_input/2 atom exhaustion via unchecked Module.concat allows BEAM VM crash | ash | Hex | High | Fix reported | |
| Ash has authorization bypass when bypass policy condition evaluates to true | ash | Hex | High | Fix reported | |
| Ash Framework: Filter authorization misapplies impossible bypass/runtime policies | ash | Hex | High | Fix reported | |
| Before action, Ash's hooks may execute in certain scenarios despite a request being forbidden | ash | Hex | High | Fix reported |