Login Request a demo
AS
Product
ash_postgres
by ash-project · last CVE Oct 25, 2026
3
CVEs
0
On KEV
7.2
Max CVSS
2
New 30D
Vulnerabilities3In the news0Timeline
Severity mix
Critical 0High 1Medium 2Low 0
Severity
All severities3Critical0High1Medium2Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add ash_postgres to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-78699
7.2
0%
Aug 30
rename_tenant returns :ok on a failed rename, enabling cross-tenant access in AshPostgres
Affected: 0.25.0 before 2.13.0; 03510dae24020e302558ef947be7ea874a9ce756 before 8544ab15fe45784553c2d2da8ee1a388eee0174b
CVE-2026-115627
New
6.0
0%
Oct 25
AshPostgres ignores attribute multitenancy on the join resource when loading many_to_many and through relationships, returning records related through other tenants' rows
Affected: 0.38.0 before 2.15.2; 7115bec58678f13b1ac2fb4822a0ba1aea9dbec5 before 8c25c945c39a45299193fe70b09fc2fa2aacac7b
CVE-2026-115635
New
6.0
0%
Oct 25
AshPostgres returns another tenant's record for a skipped upsert when return_skipped_upsert? is set
Affected: 2.6.22 before 2.15.2; af0903f1380468bbe1b61fe65acb33772b5e24a5 before 8aa81220c401cae412d21078d11b3519ea25d3a9
Showing 3