Description
Incorrect Authorization vulnerability in ash-project ash allows Authentication Bypass.
This issue affects ash: from 3.6.3 before 3.7.1.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| ash-project | ash | 3.6.3 – < 3.7.1 | 3.7.1 |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Hex | ash | >= 3.6.3, < 3.7.1 | 3.7.1 | EEF-CVE-2025-48044 |
References
- GitHub Advisory related vendor-advisory
- EEF CNA record for CVE-2025-48044 related
- OSV record EEF-CVE-2025-48044 related
- Introducing commit 79749c2 in ash-project/ash related
- Fix commit 8b83efa in ash-project/ash patch