Skip to content
OpenAdvisories

Package · Hex

ash_phoenix

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Low 2.3
    CVE-2026-82725

    AshPhoenix FilterForm allows filtering across non-public relationships, disclosing private related data

    Authorization Bypass Through User-Controlled Key vulnerability in ash-project ash_phoenix lets an attacker who controls filter form parameters filter across relationships the resource author marked non-public, turning the returned rows into a boolean oracle o…

    ash-project ash_phoenix ash_phoenix Hex
  • Low 2.3
    CVE-2026-82727

    AshPhoenix Form.Auto leaks submitted params in an unknown _union_type error message

    Generation of Error Message Containing Sensitive Information vulnerability in ash-project ash_phoenix writes the entire raw submitted param map into an exception message, so secrets submitted alongside a union form field leak into logs, crash reports and the …

    ash-project ash_phoenix ash_phoenix Hex