ash-project ash_sql vulnerabilities

Newest CVEs

• CVE-2026-77454

  exists/2 predicate silently dropped on limited relationships with a parent() filter in AshSql

  ash-project · ash_sql

  Medium5.9
• CVE-2026-81316

  Same-named aggregates with differing filters are conflated in AshSql

  ash-project · ash_sql

  Low2.1
• CVE-2026-81318

  Distinct-query aggregate drops the tenant schema prefix, leaking across tenants in AshSql

  ash-project · ash_sql

  Low2.1
• CVE-2026-78691

  Unescaped backslash allows LIKE wildcard injection in AshSql string search

  ash-project · ash_sql

  Low2.1
• CVE-2026-80227

  SQL string_trim removes only spaces, diverging from in-memory trimming in AshSql

  ash-project · ash_sql

  Low2.1