Skip to content
OpenAdvisories

Package · Hex

ash_cloak

2 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium 5.9

    Unsafe deserialization of decrypted terms enables node DoS in AshCloak

    Deserialization of Untrusted Data vulnerability in ash-project ash_cloak allows an attacker who can influence the bytes of an encrypted column to crash the BEAM node, by triggering unbounded atom creation or a decompression bomb during decryption. AshCloak.Ca…