Ash-project

    Dashboard / Vendors

    Products: 17
    Vulnerabilities: 90
    Known Exploited: 0
    0
    Critical Level Threats
    2
    High Level Threats
    1
    Medium Level Threats
    0
    Low Level Threats

    Vulnerabilities

    100806040200
    JanFebMarAprMayJunJulAugSepOctNovDec
    Critical Level Threats
    High Level Threats
    Medium Level Threats
    Low Level Threats

    Products Security index

    Actions
    Items Per Page

    Vulnerabilities

    CVE-2026-96581

    An upsert on the primary key in Ash ignores attribute multitenancy, so one tenant can read, overwrite and take over another tenant's records

    Last Modified: Oct 26, 2026
    Published: Oct 26, 2026

    CVE-2026-115627

    AshPostgres ignores attribute multitenancy on the join resource when loading many_to_many and through relationships, returning records related through other tenants' rows

    Last Modified: Oct 26, 2026
    Published: Oct 25, 2026

    CVE-2026-115635

    AshPostgres returns another tenant's record for a skipped upsert when return_skipped_upsert? is set

    Last Modified: Oct 26, 2026
    Published: Oct 25, 2026

    CVE-2026-114214

    Loading a through relationship with a limit of 1 in Ash ignores the through path and returns unrelated destination records

    Last Modified: Oct 26, 2026
    Published: Oct 25, 2026

    CVE-2026-105283

    Internal error terms inspected into AshTypescript RPC error responses

    Last Modified: Oct 16, 2026
    Published: Oct 12, 2026
    Items Per Page