Ash.Type.Union with :map_with_tag does not force the tag on dump, enabling tag confusion
CVE-2026-82741
Improper Validation of Specified Type of Input vulnerability in ash-project ash lets an attacker confuse the stored type
#advisory
共收录 23717 条相关情报。
← 返回所有主题The WPLP Cookie Consent – Cookie Banner & Consent Management for GDPR, CCPA & Google Consent Mode...
CVE-2026-75865
The WPLP Cookie Consent – Cookie Banner & Consent Management for GDPR, CCPA & Google Consent Mode plugin for WordPress i
A path traversal vulnerability exists in Sage Employee Self Service’s custom logo functionality...
CVE-2026-67395
A path traversal vulnerability exists in Sage Employee Self Service’s custom logo functionality due to improper validati
A vulnerability in the Backblaze Client allows a local user to make the system not bootable by...
CVE-2026-19820
A vulnerability in the Backblaze Client allows a local user to make the system not bootable by creating a link from Back
A flaw in Node.js HTTP client can cause a request desynchronization for Node.js-based forwarding...
CVE-2026-48932
A flaw in Node.js HTTP client can cause a request desynchronization for Node.js-based forwarding proxies that rebuild ou
Eval injection in cPanel 11.138.0.0 and earlier allows remote authenticated users to execute...
CVE-2026-65643
Eval injection in cPanel 11.138.0.0 and earlier allows remote authenticated users to execute arbitrary code as root.
A flaw was found in popt. This vulnerability allows an attacker to provide specially crafted...
CVE-2026-18743
A flaw was found in popt. This vulnerability allows an attacker to provide specially crafted configuration content to a
A critical local privilege escalation via OS command injection vulnerability has been discovered...
CVE-2026-67394
A critical local privilege escalation via OS command injection vulnerability has been discovered in Plesk for Linux, aff
Ash.Type ignores outer array constraints on nested {:array, {:array, type}} inputs
CVE-2026-82740
Improper Input Validation vulnerability in ash-project ash fails to enforce the outer array constraints on a doubly-nest
Ash.Resource.Validation.Confirm leaks a confirmed field's stored value in the atomic mismatch error
CVE-2026-82739
Generation of Error Message Containing Sensitive Information vulnerability in ash-project ash discloses the stored value
Ash.Type.UUIDv7 accepts non-v7 UUIDs that then fail to load, causing persistent denial of service
CVE-2026-82738
Improper Input Validation vulnerability in ash-project ash allows an attacker to persistently deny reads of a record by
Ash.Vector wraps the 16-bit dimension header for vectors over 65,535 elements, corrupting data and crashing reads
CVE-2026-82737
Integer Overflow or Wraparound vulnerability in ash-project ash lets an attacker corrupt a stored vector and crash later
Ash.Type.CiString validates length and match constraints before case folding, allowing constraint bypass
CVE-2026-82736
Incorrect Behavior Order: Validate Before Canonicalize vulnerability in ash-project ash lets an attacker store a case-in
Match regex runs on over-length input in Ash.Type.String, enabling regex denial of service
CVE-2026-82735
Uncontrolled Resource Consumption vulnerability in ash-project ash allows an attacker to force an expensive regular expr
jackson-databind resolves attacker-controlled URI schemes when deserializing java.nio.file.Path
CVE-2026-19032
jackson-databind's deserializer for java.nio.file.Path resolves an attacker-supplied URI without restricting the URI sch
Non-finite Infinity/NaN decimal values bypass bounds constraints in Ash.Type.Decimal
CVE-2026-82734
Improper Validation of Specified Quantity in Input vulnerability in ash-project ash allows an attacker to submit a non-f
Unescaped path parameters in AshTypescript generated TypeScript client allow request redirection
CVE-2026-82731
URL Redirection to Untrusted Site ('Open Redirect') vulnerability in ash-project ash_typescript allows an attacker who c
Unbounded atom creation from client-supplied RPC field names in AshTypescript field formatter
CVE-2026-74837
Allocation of Resources Without Limits or Throttling vulnerability in ash-project ash_typescript allows an unauthenticat
Route handler return value echoed into AshTypescript error response
CVE-2026-82733
Generation of Error Message Containing Sensitive Information vulnerability in ash-project ash_typescript allows an unaut
Declared argument constraints not enforced on AshTypescript typed controller routes
CVE-2026-82732
Improper Input Validation vulnerability in ash-project ash_typescript allows a remote attacker to submit argument values