Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

ash_graphql — Vulnerabilities & Security Advisories 6

All 6 CVE vulnerabilities found in ash_graphql, with AI-generated Chinese analysis, references, and POCs.

Vendor: ash-project

CVE ID Title CVSS Severity Published
CVE-2026-78693 Incomplete redaction re-attaches the original error path in AshGraphql, leaking internal field names CWE-209 6.9 Medium 2026-08-30
CVE-2026-80223 Cross-tenant subscription disclosure in AshGraphql authorizes notifications in memory without a tenant-scoped read CWE-863 7.1 High 2026-08-30
CVE-2026-81636 Query-complexity limit bypass via first/last pagination arguments in AshGraphql enables denial of service CWE-770 8.7 High 2026-08-30
CVE-2026-81633 Unhandled KeyError in AshGraphql relay node resolution crashes queries via an unknown type segment CWE-20 6.9 Medium 2026-08-30
CVE-2026-81643 Broken access control in AshGraphql subscription batcher applies authorization suppression to only the first notification CWE-863 2.3 Low 2026-08-30
CVE-2026-82367 Re-entrant synchronous publish in AshGraphql subscription batcher delivers one subscriber's records to another's topic CWE-488 2.3 Low 2026-08-30

All 6 known CVE vulnerabilities affecting ash_graphql with full Chinese analysis, references, and POCs where available.