Ash Postgres
Ash-Project · 2 CVEs
CVE-2026-78699
HIGH
rename_tenant returns :ok on a failed rename, enabling cross-tenant access in AshPostgres
Aug 30, 2026
CVE-2024-49756
MEDIUM
AshPostgres empty, atomic, non-bulk actions, policy bypass for side-effects vulnerability.
Oct 23, 2024
| CVE ID | Description | Severity | EPSS | Published |
|---|---|---|---|---|
| CVE-2026-78699 | rename_tenant returns :ok on a failed rename, enabling cross-tenant access in AshPostgres | HIGH | 0.16% | Aug 30, 2026 |
| CVE-2024-49756 | AshPostgres empty, atomic, non-bulk actions, policy bypass for side-effects vulnerability. | MEDIUM | 0.51% | Oct 23, 2024 |
Showing 1 to 2 of 2 CVEs