What’s Vulnerable › Products

ash-project ash_postgres vulnerabilities

3 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 3 published in the last 12 months.

Check whether your ash-project ash_postgres version is affected

Latest ash-project ash_postgres vulnerabilities

• CVE-2026-115627 — AshPostgres ignores attribute multitenancy on the join resource when loading many_to_many and through relationships, returning records related through other tenants' rows (CVSS 6.0)
• CVE-2026-115635 — AshPostgres returns another tenant's record for a skipped upsert when return_skipped_upsert? is set (CVSS 6.0)
• CVE-2026-78699 — rename_tenant returns :ok on a failed rename, enabling cross-tenant access in AshPostgres (CVSS 7.2)