AS
Product
ash_ai
7
CVEs
0
On KEV
8.9
Max CVSS
0
New 30D
Severity mix
Critical 0High 4Medium 3Low 0
Watch
Add ash_ai to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-78230 | 6.0 | Sep 8 | AshAi aggregate tool can read field-policy-protected fields Affected: 0.1.0 before 1.0.3; 2ba234b50946a3b8116190c8467f9f4dfa5edce7 before 9c02de581625c342c9870a672830bff28c1d701e |
| CVE-2026-82579 | 6.0 | Aug 31 | AshAi tool loop never terminates when all tool calls are filtered out, enabling denial of service Affected: 0.6.0 before 1.0.0; bc2122f78fca6c11d8ec2b9ac53148ec17476460 before 53325fdab90afab628c6a53232ef2a9001580bd9 |
| CVE-2026-82580 | 5.3 | Aug 31 | AshAi echoes raw tool exception messages into the conversation, disclosing internal details Affected: 0.6.0 before 1.0.0; bc2122f78fca6c11d8ec2b9ac53148ec17476460 before c68dfbdb220426dc015b58379e95bde8e9f0995a |
Showing 3
