ash-project ash_typescript vulnerabilities

Newest CVEs

• CVE-2026-105283

  Internal error terms inspected into AshTypescript RPC error responses

  ash-project · ash_typescript

  Medium6.3
• CVE-2026-82731

  Unescaped path parameters in AshTypescript generated TypeScript client allow request redirection

  ash-project · ash_typescript

  Low2.3
• CVE-2026-74837

  Unbounded atom creation from client-supplied RPC field names in AshTypescript field formatter

  ash-project · ash_typescript

  High8.7
• CVE-2026-82733

  Route handler return value echoed into AshTypescript error response

  ash-project · ash_typescript

  Medium6.3
• CVE-2026-82732

  Declared argument constraints not enforced on AshTypescript typed controller routes

  ash-project · ash_typescript

  Medium6.3
• CVE-2026-82730

  Authorization-redacted field values disclosed through AshTypescript result normalization

  ash-project · ash_typescript

  High8.2
• CVE-2026-77950

  RPC error handler fails open in AshTypescript, disclosing unredacted errors

  ash-project · ash_typescript

  Medium6.3
• CVE-2026-77856

  Unbounded atom creation from typed struct field names in AshTypescript field selector

  ash-project · ash_typescript

  High8.2