Ash-Project / Ash SQL
5 CVEs
| CVE ID | Description | Severity | CVSS | Published |
|---|---|---|---|---|
| CVE-2026-77454 | exists/2 predicate silently dropped on limited relationships with a parent() filter in AshSql | MEDIUM | 5.9 | Aug 30, 2026 |
| CVE-2026-81316 | Same-named aggregates with differing filters are conflated in AshSql | LOW | 2.1 | Aug 30, 2026 |
| CVE-2026-81318 | Distinct-query aggregate drops the tenant schema prefix, leaking across tenants in AshSql | LOW | 2.1 | Aug 30, 2026 |
| CVE-2026-78691 | Unescaped backslash allows LIKE wildcard injection in AshSql string search | LOW | 2.1 | Aug 30, 2026 |
| CVE-2026-80227 | SQL string_trim removes only spaces, diverging from in-memory trimming in AshSql | LOW | 2.1 | Aug 30, 2026 |
Showing 1 to 5 of 5 CVEs