Ash-Project Ash Phoenix

4 known vulnerabilities in Ash-Project Ash Phoenix, with patch priority, exploit likelihood and the news covering them.

Latest vulnerabilities

  • CVE-2026-82727 CVSS 2.3 low Generation of Error Message Containing Sensitive Information vulnerability in ash-project ash_phoenix writes the entire raw submitted…
  • CVE-2026-82726 CVSS 6.3 medium Permissive Regular Expression vulnerability in ash-project ash_phoenix lets a remote client select the tenant an Ash application uses, or…
  • CVE-2026-82725 CVSS 2.3 low Authorization Bypass Through User-Controlled Key vulnerability in ash-project ash_phoenix lets an attacker who controls filter form…
  • CVE-2026-82724 CVSS 7.6 high Incorrect Authorization vulnerability in ash-project ash_phoenix invokes the SubdomainHook authorization callback with a nil tenant, so…