Skip to content
OpenAdvisories

Package · Hex

ash_typescript

8 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 8.7
    CVE-2026-74837

    Unbounded atom creation from client-supplied RPC field names in AshTypescript field formatter

    Allocation of Resources Without Limits or Throttling vulnerability in ash-project ash_typescript allows an unauthenticated attacker to exhaust the BEAM atom table and abort the node via client-supplied RPC field names. AshTypescript.FieldFormatter.convert_to_…

    ash-project ash_typescript ash_typescript Hex
  • High 8.2
    CVE-2026-82730

    Authorization-redacted field values disclosed through AshTypescript result normalization

    Incorrect Authorization vulnerability in ash-project ash_typescript allows an unauthorized RPC caller to read attribute values that Ash field policies denied. When a field policy denies an attribute, Ash substitutes %Ash.ForbiddenField{}, which retains the re…

    ash-project ash_typescript ash_typescript Hex
  • High 8.2
    CVE-2026-77856

    Unbounded atom creation from typed struct field names in AshTypescript field selector

    Allocation of Resources Without Limits or Throttling vulnerability in ash-project ash_typescript allows an unauthenticated attacker to exhaust the BEAM atom table and abort the node via client-supplied typed struct field names. resolve_typed_struct_field/2 in…

    ash-project ash_typescript ash_typescript Hex