Skip to content
OpenAdvisories
High · 8.6 CVE-2025-48043 EEF-CVE-2025-48043EUVD-2025-33747GHSA-7r7f-9xpj-jmr7

Bypass and runtime policies that can never pass may be incorrectly applied in filter authorization

Published Oct 10, 2025 · Updated Sep 22, 2026 · Assigned by EEF

Vendor: ash-project Product: ash Package: ash Ecosystem: Hex

Description

Incorrect Authorization vulnerability in ash-project ash allows Authentication Bypass.

This issue affects ash: from 0.1.1 before 3.6.2.

Affected products

VendorProductAffectedFixed
ash-project ash 0.1.1 – < 3.6.2 3.6.2

Affected packages

EcosystemPackageAffectedFixedRecord
Hex ash >= 0.1.1, < 3.6.2 3.6.2 EEF-CVE-2025-48043
Hex ash < 3.6.2 3.6.2 GHSA-7r7f-9xpj-jmr7

References