Skip to main content
cve.nowby Sazabi
← Hex
HexPackage

ash_ai

7 known vulnerabilities (4 high, 3 medium), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
7 · 4 high, 3 medium
Registry
Hex

Advisories 7

  • CVE-2026-78230Medium 6.0

    AshAi aggregate tool can read field-policy-protected fields

    Affected: from 0.1.0, fixed in 1.0.3; from 0.1.0, fixed in 1.0.3.

  • AshAi vectorize change leaks raw embedding-provider errors, including credentials, in a user-facing error

    Affected: from 0.1.0, fixed in 1.0.0; from 0.1.0, fixed in 1.0.0.

  • CVE-2026-82580Medium 5.3

    AshAi echoes raw tool exception messages into the conversation, disclosing internal details

    Affected: from 0.6.0, fixed in 1.0.0; from 0.6.0, fixed in 1.0.0.

  • CVE-2026-82579Medium 6.0

    AshAi tool loop never terminates when all tool calls are filtered out, enabling denial of service

    Affected: from 0.6.0, fixed in 1.0.0; from 0.6.0, fixed in 1.0.0.

  • Identity tool filter in AshAi accepts operator maps, allowing update or destroy of unidentified records

    Affected: from 0.6.0, fixed in 1.0.0; from 0.6.0, fixed in 1.0.0.

  • MCP DNS-rebinding origin check in AshAi is bypassed by a spoofed X-Forwarded-Proto header

    Affected: from 0.8.0, fixed in 1.0.0; from 0.8.0, fixed in 1.0.0.

  • EEx template evaluation of prompt content in AshAi enables remote code execution

    Affected: from 0.1.0, fixed in 1.0.0; from 0.1.0, fixed in 1.0.0.