A
Üretici güvenlik profili
ash-project
Ürün portföyü, yama kanıtları ve sömürü sinyalleri tek güvenlik karnesinde
Veriler CVE Programı, NVD, CISA KEV ve üretici güvenlik bültenlerinden birleştirilir.
Toplam CVE70
Kritik0
CISA KEV0
Public exploit60
Yama oranı%100
Ort. CVSS5.3
12 aylık açık hızı
0
0
0
0
0
0
0
0
0
40
25
2
CVE KEV
CVE önem dağılımı
70toplam CVE
Yüksek20 (29%)
Orta26 (37%)
Düşük24 (34%)
Yama ve sömürü görünümü
%100
Doğrulanmış yama
%0
CISA KEV
%86
Public exploit
70Yama var
0Kısmi
0Geçici çözüm
0Üretici: yama yok
0Bilinmiyor
Son güvenlik açıkları
6.0
CVE-2026-101028
Ash.count, Ash.exists and Ash.aggregate skip related resources' read policies in filters and sorts
A
Yama doğrulandıEPSS %0
8.2
CVE-2026-94201
Filtering an :atom attribute with unsafe_to_atom? can exhaust the BEAM atom table in Ash
A
Yama doğrulandıEPSS %0
5.9
CVE-2026-93477
Private action arguments can be set by user input on the bulk destroy and bulk update paths in Ash
A
Yama doğrulandıEPSS %0
6.0
CVE-2026-86338
Ash field policies do not filter-nil forbidden calculations and aggregates, enabling an information-disclosure oracle
A
Yama doğrulandıEPSS %0
5.9
CVE-2026-82747
Ash.Policy.Authorizer returns records denied by a runtime read policy to any actor
A
Yama doğrulandıEPSS %0
5.9
CVE-2026-82749
Ash relationship parent(...) filter degrades to an IS NULL match when the parent field is unresolved, leaking scoped records
A
Yama doğrulandıEPSS %0
2.1
CVE-2026-82748
Ash.Actions.Aggregate authorizes an aggregate under one action but computes it under another
A
Yama doğrulandıEPSS %0
5.9
CVE-2026-82746
Ash.update_many/4 atomic path skips resource policy authorization, allowing updates to forbidden records
A
Yama doğrulandıEPSS %0
5.9
CVE-2026-82745
ETS and Mnesia data layers overwrite an existing record on create instead of enforcing primary-key uniqueness
A
Yama doğrulandıEPSS %0
2.1
CVE-2026-82744
Ash.Reactor change step fails open, skipping a change when its where guard raises
A
Yama doğrulandıEPSS %0