What’s Vulnerable › Products

ash-project ash_phoenix vulnerabilities

4 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 4 published in the last 12 months.

Check whether your ash-project ash_phoenix version is affected

Latest ash-project ash_phoenix vulnerabilities

• CVE-2026-82727 — AshPhoenix Form.Auto leaks submitted params in an unknown _union_type error message (CVSS 2.3)
• CVE-2026-82726 — AshPhoenix get_subdomain maps a crafted or differently-cased Host header to an arbitrary tenant (CVSS 6.3)
• CVE-2026-82725 — AshPhoenix FilterForm allows filtering across non-public relationships, disclosing private related data (CVSS 2.3)
• CVE-2026-82724 — Broken access control in AshPhoenix SubdomainHook via a nil tenant in handle_subdomain (CVSS 7.6)