Skip to content
OpenAdvisories

Package · Hex

ash_phoenix

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.6
    CVE-2026-82724

    Broken access control in AshPhoenix SubdomainHook via a nil tenant in handle_subdomain

    Incorrect Authorization vulnerability in ash-project ash_phoenix invokes the SubdomainHook authorization callback with a nil tenant, so tenant-scoped access checks never see the tenant they are meant to enforce. AshPhoenix.LiveView.SubdomainHook.on_mount/4 at…

    ash-project ash_phoenix ash_phoenix Hex