Skip to content
OpenAdvisories

Package · Hex

ash_oban

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.9
    CVE-2026-78228

    Unbounded handle_error recursion enables denial of service in AshOban triggers

    Uncontrolled Recursion vulnerability in ash-project ash_oban allows a user who can drive a trigger's on_error action to fail on the final attempt to exhaust worker CPU and memory, denying service. The generated worker's atomic handle_error/4 runs the trigger'…

    ash-project ash_oban ash_oban Hex
  • Medium 5.9
    CVE-2026-78038

    Job argument injection via :args overrides primary_key and tenant in AshOban

    Improperly Controlled Modification of Dynamically-Determined Object Attributes vulnerability in ash-project ash_oban allows a user whose input reaches the :args option of AshOban.build_trigger/3 to retarget an update or destroy trigger at another record, incl…

    ash-project ash_oban ash_oban Hex