Login Request a demo
AS
Product
ash_graphql
by ash-project · last CVE Aug 30, 2026
6
CVEs
0
On KEV
8.7
Max CVSS
0
New 30D
Vulnerabilities6In the news0Timeline
Severity mix
Critical 0High 2Medium 2Low 2
Severity
All severities6Critical0High2Medium2Low2
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add ash_graphql to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-81643
2.3
0%
Aug 30
Broken access control in AshGraphql subscription batcher applies authorization suppression to only the first notification
Affected: 1.4.0 before 1.11.0; 3cb2c9870d050c7c4bba6c211aaed97d732f7e81 before e8e67f39add2ce0771e6db5f086afe68ba212c57
CVE-2026-82367
2.3
0%
Aug 30
Re-entrant synchronous publish in AshGraphql subscription batcher delivers one subscriber's records to another's topic
Affected: 1.4.0 before 1.11.0; 3cb2c9870d050c7c4bba6c211aaed97d732f7e81 before b798ef5288664a0261990b19765558f168b718fb
Showing 2