AS
Product
ash_typescript
8
CVEs
0
On KEV
8.7
Max CVSS
1
New 30D
Severity mix
Critical 0High 3Medium 4Low 1
Watch
Add ash_typescript to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-74837 | 8.7 | Sep 1 | Unbounded atom creation from client-supplied RPC field names in AshTypescript field formatter Affected: 0.1.0 before 0.18.0; 1a3d4c343430c8e4784acfcd33122a807fafa086 before df95df4b9afdca5e5bbce32dbd566ccc49a7f14b |
| CVE-2026-82730 | 8.2 | Sep 1 | Authorization-redacted field values disclosed through AshTypescript result normalization Affected: 0.11.0 before 0.18.0; 9cade7661a01b6e4d940386f482f48d148dbb1e6 before aa7f9f1967b0bec806ac1156142267e805d70a55 |
| CVE-2026-77856 | 8.2 | Sep 1 | Unbounded atom creation from typed struct field names in AshTypescript field selector Affected: 0.11.0 before 0.18.0; 7c3d30896f2f9a54edea17e3787549776b1b288d before 0ab5c83a7df28d51a6de1fb9b859a142b2b12919 |
| CVE-2026-105283 | 6.3 | Oct 12 | Internal error terms inspected into AshTypescript RPC error responses Affected: 0.1.0 before 0.19.1; 8e204ce34e24a158cf22a2dac4d53c44716c9e30 before 4b3c65203ee78dc992d6d2e6559625c5460a01cd |
| CVE-2026-82733 | 6.3 | Sep 1 | Route handler return value echoed into AshTypescript error response Affected: 0.15.0 before 0.18.0; 546a15e1a2d7dbf1df2d5a6ee4404bc3da87852e before dec80e29543f96e43eeece8501376562f17ac638 |
| CVE-2026-82732 | 6.3 | Sep 1 | Declared argument constraints not enforced on AshTypescript typed controller routes Affected: 0.15.0 before 0.18.0; 546a15e1a2d7dbf1df2d5a6ee4404bc3da87852e before 21ab6f1229a4dccdb56bc37ed437d9672a0c4a4e |
| CVE-2026-77950 | 6.3 | Sep 1 | RPC error handler fails open in AshTypescript, disclosing unredacted errors Affected: 0.8.0 before 0.18.0; cb01cc8749e5a2a17fb45aedbe75df30a9f1126e before 59d8e985a98cf2e01794dbe5b919b897a95311f4 |
| CVE-2026-82731 | 2.3 | Sep 1 | Unescaped path parameters in AshTypescript generated TypeScript client allow request redirection Affected: 0.15.0 before 0.18.0; 6669e22ece34b4534e706a46d1842f01b68ee23a before 5165f752f5f92b755d946f2d1ce750ff69083ffc |
Showing 8