ash-project ash_graphql vulnerabilities
6 published CVEs name ash-project ash_graphql among the affected products.
- Published CVEs
- 6
- Last 12 months
- 6
- Critical
- 0
- Known exploited
- 0
Critical 0High 2Medium 2Low 2Not scored 0
Newest CVEs
- CVE-2026-78693
Incomplete redaction re-attaches the original error path in AshGraphql, leaking internal field names
ash-project · ash_graphql
Medium6.9 - CVE-2026-80223
Cross-tenant subscription disclosure in AshGraphql authorizes notifications in memory without a tenant-scoped read
ash-project · ash_graphql
High7.1 - CVE-2026-81636
Query-complexity limit bypass via first/last pagination arguments in AshGraphql enables denial of service
ash-project · ash_graphql
High8.7 - CVE-2026-81633
Unhandled KeyError in AshGraphql relay node resolution crashes queries via an unknown type segment
ash-project · ash_graphql
Medium6.9 - CVE-2026-81643
Broken access control in AshGraphql subscription batcher applies authorization suppression to only the first notification
ash-project · ash_graphql
Low2.3 - CVE-2026-82367
Re-entrant synchronous publish in AshGraphql subscription batcher delivers one subscriber's records to another's topic
ash-project · ash_graphql
Low2.3