Skip to content
OpenAdvisories

Package · Hex

ash_sql

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.9
    CVE-2026-77454

    exists/2 predicate silently dropped on limited relationships with a parent() filter in AshSql

    Incorrect Authorization vulnerability in ash-project ash_sql allows a caller to bypass a scoping or authorization filter expressed as exists/2 over a relationship that declares both a limit (or from_many?) and a parent(...)-referencing filter or sort. AshSql.…

    ash-project ash_sql ash_sql Hex