Login Request a demo
AS
Product
ash_sql
by ash-project · last CVE Aug 30, 2026
5
CVEs
0
On KEV
5.9
Max CVSS
0
New 30D
Vulnerabilities5In the news0Timeline
Severity mix
Critical 0High 0Medium 1Low 4
Severity
All severities5Critical0High0Medium1Low4
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add ash_sql to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-81316
2.1
0%
Aug 30
Same-named aggregates with differing filters are conflated in AshSql
Affected: 0.1.0 before 0.7.1; dd092ed273dec7bd2194352f24a39229fc8ae68b before 4b95468e5434a3526571414219719c9518be6694
CVE-2026-81318
2.1
0%
Aug 30
Distinct-query aggregate drops the tenant schema prefix, leaking across tenants in AshSql
Affected: 0.1.0 before 0.7.1; dd092ed273dec7bd2194352f24a39229fc8ae68b before 3d95478cc9e1d5bfaf6144fe9b9793f29e5ab889
CVE-2026-78691
2.1
0%
Aug 30
Unescaped backslash allows LIKE wildcard injection in AshSql string search
Affected: 0.1.1-rc.10 before 0.7.1; cfc7da474c5be2190fd62664a83a689377a8d512 before d95c55c64b1b42cc2fd30211a4913f3145156cd4
CVE-2026-80227
2.1
0%
Aug 30
SQL string_trim removes only spaces, diverging from in-memory trimming in AshSql
Affected: 0.1.0 before 0.7.1; dd092ed273dec7bd2194352f24a39229fc8ae68b before 1b11b5d8bc5321e2e6acac21594ef08f61986117
Showing 4