# ash (Hex) vulnerabilities 31 known vulnerabilities (7 high, 15 medium, 9 low), with the versions each affects and the releases that fix them. ## At a glance - Latest release: not known (cve.now hasn't read this package's releases) - Newest unaffected release: not known without release data - Registry: https://hex.pm/packages/ash ## Advisories (31) ### [CVE-2026-96581](https://cve.now/CVE-2026-96581): An upsert on the primary key in Ash ignores attribute multitenancy, so one tenant can read, overwrite and take over another tenant's records - Severity: High 7.6 - Published: Oct 26, 2026 - Affected: from 1.22.0, fixed in 3.37.2. ### [CVE-2026-114214](https://cve.now/CVE-2026-114214): Loading a through relationship with a limit of 1 in Ash ignores the through path and returns unrelated destination records - Severity: Medium 6.0 - Published: Oct 25, 2026 - Affected: from 3.24.0, fixed in 3.37.1. ### [CVE-2026-101028](https://cve.now/CVE-2026-101028): Ash.count, Ash.exists and Ash.aggregate skip related resources' read policies in filters and sorts - Severity: Medium 6.0 - Published: Oct 9, 2026 - Affected: from 2.6.0, fixed in 3.34.6. ### [CVE-2026-94201](https://cve.now/CVE-2026-94201): Filtering an :atom attribute with unsafe\_to\_atom? can exhaust the BEAM atom table in Ash - Severity: High 8.2 - Published: Oct 5, 2026 - Affected: from 3.5.1, fixed in 3.34.3. ### [CVE-2026-93477](https://cve.now/CVE-2026-93477): Private action arguments can be set by user input on the bulk destroy and bulk update paths in Ash - Severity: Medium 5.9 - Published: Sep 25, 2026 - Affected: from 2.17.15, fixed in 3.33.11. ### [CVE-2026-86338](https://cve.now/CVE-2026-86338): Ash field policies do not filter-nil forbidden calculations and aggregates, enabling an information-disclosure oracle - Severity: Medium 6.0 - Published: Sep 16, 2026 - Affected: from 2.11.0-rc.0, fixed in 3.33.4; from 2.11.0-rc.0, fixed in 3.33.4. ### [CVE-2026-82752](https://cve.now/CVE-2026-82752): Ash string length constraints count graphemes, so a combining-mark string of any size passes max\_length - Severity: Medium 5.9 - Published: Sep 5, 2026 - Affected: from 0.10.0, fixed in 3.33.0; from 0.10.0, fixed in 3.33.0. ### [CVE-2026-82747](https://cve.now/CVE-2026-82747): Ash.Policy.Authorizer returns records denied by a runtime read policy to any actor - Severity: Medium 5.9 - Published: Sep 1, 2026 - Affected: from 3.4.44, fixed in 3.32.2; from 3.4.44, fixed in 3.32.2. ### [CVE-2026-82749](https://cve.now/CVE-2026-82749): Ash relationship parent(...) filter degrades to an IS NULL match when the parent field is unresolved, leaking scoped records - Severity: Medium 5.9 - Published: Sep 1, 2026 - Affected: from 3.13.2, fixed in 3.32.2; from 3.13.2, fixed in 3.32.2. ### [CVE-2026-82748](https://cve.now/CVE-2026-82748): Ash.Actions.Aggregate authorizes an aggregate under one action but computes it under another - Severity: Low 2.1 - Published: Sep 1, 2026 - Affected: from 3.5.13, fixed in 3.32.2; from 3.5.13, fixed in 3.32.2. ### [CVE-2026-82746](https://cve.now/CVE-2026-82746): Ash.update\_many/4 atomic path skips resource policy authorization, allowing updates to forbidden records - Severity: Medium 5.9 - Published: Sep 1, 2026 - Affected: from 3.29.0, fixed in 3.32.2; from 3.29.0, fixed in 3.32.2. ### [CVE-2026-82745](https://cve.now/CVE-2026-82745): ETS and Mnesia data layers overwrite an existing record on create instead of enforcing primary-key uniqueness - Severity: Medium 5.9 - Published: Sep 1, 2026 - Affected: from 0.4.0, fixed in 3.32.2; from 0.4.0, fixed in 3.32.2. ### [CVE-2026-82744](https://cve.now/CVE-2026-82744): Ash.Reactor change step fails open, skipping a change when its where guard raises - Severity: Low 2.1 - Published: Sep 1, 2026 - Affected: from 3.0.0-rc.17, fixed in 3.32.2; from 3.0.0-rc.17, fixed in 3.32.2. ### [CVE-2026-82743](https://cve.now/CVE-2026-82743): Ash.Actions.Read.AsyncLimiter busy-spins a scheduler while awaiting slow async reads - Severity: Low 2.1 - Published: Sep 1, 2026 - Affected: from 2.19.0, fixed in 3.32.2; from 2.19.0, fixed in 3.32.2. ### [CVE-2026-82742](https://cve.now/CVE-2026-82742): Ash.Filter.Runtime materializes a combinatorial cross-product over to-many relationships, exhausting memory - Severity: Medium 5.9 - Published: Sep 1, 2026 - Affected: from 1.29.0-rc0, fixed in 3.32.2; from 1.29.0-rc0, fixed in 3.32.2. ### [CVE-2026-82741](https://cve.now/CVE-2026-82741): Ash.Type.Union with :map\_with\_tag does not force the tag on dump, enabling tag confusion - Severity: Low 2.1 - Published: Sep 1, 2026 - Affected: from 2.14.18, fixed in 3.32.2; from 2.14.18, fixed in 3.32.2. ### [CVE-2026-82740](https://cve.now/CVE-2026-82740): Ash.Type ignores outer array constraints on nested {:array, {:array, type}} inputs - Severity: Low 2.1 - Published: Sep 1, 2026 - Affected: from 2.16.1, fixed in 3.32.2; from 2.16.1, fixed in 3.32.2. ### [CVE-2026-82739](https://cve.now/CVE-2026-82739): Ash.Resource.Validation.Confirm leaks a confirmed field's stored value in the atomic mismatch error - Severity: Low 2.1 - Published: Sep 1, 2026 - Affected: from 2.17.20, fixed in 3.32.2; from 2.17.20, fixed in 3.32.2. ### [CVE-2026-82738](https://cve.now/CVE-2026-82738): Ash.Type.UUIDv7 accepts non-v7 UUIDs that then fail to load, causing persistent denial of service - Severity: Medium 5.9 - Published: Sep 1, 2026 - Affected: from 3.6.3, fixed in 3.32.2; from 3.6.3, fixed in 3.32.2. ### [CVE-2026-82737](https://cve.now/CVE-2026-82737): Ash.Vector wraps the 16-bit dimension header for vectors over 65,535 elements, corrupting data and crashing reads - Severity: Medium 5.9 - Published: Sep 1, 2026 - Affected: from 2.14.13, fixed in 3.32.2; from 2.14.13, fixed in 3.32.2. ### [CVE-2026-82736](https://cve.now/CVE-2026-82736): Ash.Type.CiString validates length and match constraints before case folding, allowing constraint bypass - Severity: Low 2.1 - Published: Sep 1, 2026 - Affected: from 1.29.0-rc0, fixed in 3.32.2; from 1.29.0-rc0, fixed in 3.32.2. ### [CVE-2026-82735](https://cve.now/CVE-2026-82735): Match regex runs on over-length input in Ash.Type.String, enabling regex denial of service - Severity: Medium 5.9 - Published: Sep 1, 2026 - Affected: from 0.10.0, fixed in 3.32.2; from 0.10.0, fixed in 3.32.2. ### [CVE-2026-82734](https://cve.now/CVE-2026-82734): Non-finite Infinity/NaN decimal values bypass bounds constraints in Ash.Type.Decimal - Severity: Low 2.1 - Published: Sep 1, 2026 - Affected: from 1.28.0, fixed in 3.32.2; from 1.28.0, fixed in 3.32.2. ### [CVE-2026-67579](https://cve.now/CVE-2026-67579): Filter expression injection via forged keyset pagination cursor in Ash - Severity: High 7.5 - Published: Aug 12, 2026 - Affected: from 1.17.0, fixed in 3.31.3; from 1.17.0, fixed in 3.31.3. ### [CVE-2026-70395](https://cve.now/CVE-2026-70395): Predicate injection in manage\_relationship belongs\_to lookup discloses secret lookup keys in Ash - Severity: Low 2.1 - Published: Aug 9, 2026 - Affected: from 1.52.0-rc.11, fixed in 3.31.1; from 1.52.0-rc.11, fixed in 3.31.1. ### [CVE-2026-69659](https://cve.now/CVE-2026-69659): Memory exhaustion via unbounded deserialization of keyset pagination cursors in Ash.Page.Keyset - Severity: Medium 5.9 - Published: Aug 9, 2026 - Affected: from 1.17.0, fixed in 3.31.1; from 1.17.0, fixed in 3.31.1. ### [CVE-2026-55736](https://cve.now/CVE-2026-55736): Private action arguments can be set by user input in Ash - Severity: Medium 5.9 - Published: Jun 23, 2026 - Affected: from 3.0.0, fixed in 3.29.3; from 3.0.0, fixed in 3.29.3. ### [CVE-2026-34593](https://cve.now/CVE-2026-34593): Ash Framework: Ash.Type.Module.cast\_input/2 atom exhaustion via unchecked Module.concat allows BEAM VM crash - Severity: High 8.2 - Published: Apr 2, 2026 - Affected: fixed in 3.22.0. ### [CVE-2025-48044](https://cve.now/CVE-2025-48044): Authorization bypass when bypass policy condition evaluates to true - Severity: High 8.6 - Published: Oct 17, 2025 - Affected: from 3.6.3, fixed in 3.7.1; from 3.6.3, fixed in 3.7.1. ### [CVE-2025-48043](https://cve.now/CVE-2025-48043): Bypass and runtime policies that can never pass may be incorrectly applied in filter authorization - Severity: High 8.6 - Published: Oct 10, 2025 - Affected: from 0.1.1, fixed in 3.6.2; fixed in 3.6.2; from 0.1.1, fixed in 3.6.2. ### [CVE-2025-48042](https://cve.now/CVE-2025-48042): Before action hooks may execute in certain scenarios despite a request being forbidden - Severity: High 7.1 - Published: Sep 7, 2025 - Affected: from 0.1.1, fixed in 3.5.39; from 0.1.1, fixed in 3.5.39; fixed in 3.5.39. --- Source: cve.now Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards. Page: https://cve.now/packages/hex/ash Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.