AS
Product
ash_ai
by ash-project · last CVE Sep 8, 2026
7
CVEs
0
On KEV
8.9
Max CVSS
0
New 30D
Severity mix
Critical 0High 4Medium 3Low 0
Watch

Add ash_ai to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-78230
6.0
0%
Sep 8
AshAi aggregate tool can read field-policy-protected fields
Affected: 0.1.0 before 1.0.3; 2ba234b50946a3b8116190c8467f9f4dfa5edce7 before 9c02de581625c342c9870a672830bff28c1d701e
CVE-2026-82579
6.0
0%
Aug 31
AshAi tool loop never terminates when all tool calls are filtered out, enabling denial of service
Affected: 0.6.0 before 1.0.0; bc2122f78fca6c11d8ec2b9ac53148ec17476460 before 53325fdab90afab628c6a53232ef2a9001580bd9
CVE-2026-82580
5.3
0%
Aug 31
AshAi echoes raw tool exception messages into the conversation, disclosing internal details
Affected: 0.6.0 before 1.0.0; bc2122f78fca6c11d8ec2b9ac53148ec17476460 before c68dfbdb220426dc015b58379e95bde8e9f0995a
Showing 3