Skip to content
OpenAdvisories

Package · Hex

ash_graphql

6 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.9
    CVE-2026-78693

    Incomplete redaction re-attaches the original error path in AshGraphql, leaking internal field names

    Generation of Error Message Containing Sensitive Information vulnerability in ash-project ash_graphql allows a remote client to read internal field names that an application configured its error_handler to redact. In AshGraphql.Errors, each error is passed to…

    ash-project ash_graphql ash_graphql Hex
  • Medium 6.9
    CVE-2026-81633

    Unhandled KeyError in AshGraphql relay node resolution crashes queries via an unknown type segment

    Improper Input Validation vulnerability in ash-project ash_graphql allows an unauthenticated client to crash a relay node(id: ...) query with an unhandled KeyError. AshGraphql.Graphql.Resolver.resolve_node/2 decodes the client-supplied global ID with decode_r…

    ash-project ash_graphql ash_graphql Hex