Skip to content
OpenAdvisories

Package · Hex

ash_sqlite

1 known vulnerabilities.

1 result · Feed

  • Low 2.1

    JSON path injection via unescaped get_path segments in AshSqlite

    Improper Neutralization of Special Elements in Data Query Logic vulnerability in ash-project ash_sqlite allows an attacker who controls a get_path/2 segment to traverse into nested JSON the application never exposed, disclosing private or sensitive? embedded …