ash-project ash_sql vulnerabilities
5 published CVEs name ash-project ash_sql among the affected products.
- 5Published CVEs5 of them scored
- 5Last 12 monthspublished in the last year
- 0Critical0 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-77454
exists/2 predicate silently dropped on limited relationships with a parent() filter in AshSql
ash-project · ash_sql
Medium5.9 - CVE-2026-81316
Same-named aggregates with differing filters are conflated in AshSql
ash-project · ash_sql
Low2.1 - CVE-2026-81318
Distinct-query aggregate drops the tenant schema prefix, leaking across tenants in AshSql
ash-project · ash_sql
Low2.1 - CVE-2026-78691
Unescaped backslash allows LIKE wildcard injection in AshSql string search
ash-project · ash_sql
Low2.1 - CVE-2026-80227
SQL string_trim removes only spaces, diverging from in-memory trimming in AshSql
ash-project · ash_sql
Low2.1