ash-project ash_postgres vulnerabilities

AshPostgres ignores attribute multitenancy on the join resource when loading many_to_many and through relationships, returning records related through other tenants' rows

ash-project · ash_postgres

AshPostgres returns another tenant's record for a skipped upsert when return_skipped_upsert? is set

ash-project · ash_postgres

rename_tenant returns :ok on a failed rename, enabling cross-tenant access in AshPostgres

ash-project · ash_postgres

AshPostgres empty, atomic, non-bulk actions, policy bypass for side-effects vulnerability.

ash-project · ash_postgres