Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

AshSql CVE-2026-70881: Unescaped LIKE Wildcards in contains/starts_with with PoC

github.com 2026-08-30 查看中文 →
Security Advisory CVE-2026-70881 Low Ash
Affected:
  • ash_sql >= 0.11c.10, < 0.7.1
Fixed in:
  • 0.7.1
Referenced CVEs: CVE-2026-78691 · 2.1
文章内图片已隐藏以节省流量 · Upgrade to Pro to view images & offline archive
This content was auto-fetched from github.com, cleaned by our LLM pipeline, and translated to English. View original.
More from this source
Magma v1.9.0 AMF Accepts Non-Clear-Text SGMM IE in InitialUEMessage, Exposing UE Profiling Risk 2026-08-31 AshPostgres multi-tenant data leakage vuln: rename_tenant error handling + Elixir PoC 2026-08-31 Fix: Raise on failed tenant schema rename in Ash-Postgres multitenancy 2026-08-31 Avideo Rate Limit Bypass via Bot UA Detection 2026-08-31 Admidio ≤5.0.11 Pre-Auth Blind SQL Injection: Root Cause, PoC, and Fix Strategy 2026-08-31
Offline Archive

Offline screenshot & PDF are Pro-exclusive

Upgrade to Pro