What’s Vulnerable › Products

ash-project ash_sql vulnerabilities

5 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 5 published in the last 12 months.

Check whether your ash-project ash_sql version is affected

Latest ash-project ash_sql vulnerabilities

• CVE-2026-81318 — Distinct-query aggregate drops the tenant schema prefix, leaking across tenants in AshSql (CVSS 2.1)
• CVE-2026-81316 — Same-named aggregates with differing filters are conflated in AshSql (CVSS 2.1)
• CVE-2026-80227 — SQL string_trim removes only spaces, diverging from in-memory trimming in AshSql (CVSS 2.1)
• CVE-2026-78691 — Unescaped backslash allows LIKE wildcard injection in AshSql string search (CVSS 2.1)
• CVE-2026-77454 — exists/2 predicate silently dropped on limited relationships with a parent() filter in AshSql (CVSS 5.9)