Login Request a demo
AS
Product
ash_graphql
by ash-project · last CVE Aug 30, 2026
6
CVEs
0
On KEV
8.7
Max CVSS
0
New 30D
Vulnerabilities6In the news0Timeline
Severity mix
Critical 0High 2Medium 2Low 2
Severity
All severities6Critical0High2Medium2Low2
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add ash_graphql to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-81636
8.7
1%
Aug 30
Query-complexity limit bypass via first/last pagination arguments in AshGraphql enables denial of service
Affected: 0.16.23 before 1.11.0; d8a3e1b15587180ad9cb3ceeb398863d086c163b before c3229f6a65cbabb32fd7ffcac881922d1b3b30ad
CVE-2026-80223
7.1
0%
Aug 30
Cross-tenant subscription disclosure in AshGraphql authorizes notifications in memory without a tenant-scoped read
Affected: 1.4.0 before 1.11.0; 4c377e541a2adb6befc651f3dccc6a797bc58ba9 before 6e30b8b5a04bdeaed5d7514caa6b2d056d8d993e
Showing 2