Skip to content
OpenAdvisories

Package · Hex

ash_double_entry

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Low 2.1
    CVE-2026-81638

    Non-canonical ULID spellings are accepted and alias to the same record in ash_double_entry

    Improper Handling of Alternate Encoding vulnerability in ash-project ash_double_entry allows an attacker to submit several distinct string spellings of the same identifier. AshDoubleEntry.ULID renders a 128-bit ULID as 26 Crockford base-32 characters, but the…

    ash-project ash_double_entry ash_double_entry Hex