What’s Vulnerable › Products

ash-project ash_typescript vulnerabilities

8 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 8 published in the last 12 months.

Check whether your ash-project ash_typescript version is affected

Latest ash-project ash_typescript vulnerabilities

• CVE-2026-105283 — Internal error terms inspected into AshTypescript RPC error responses (CVSS 6.3)
• CVE-2026-82733 — Route handler return value echoed into AshTypescript error response (CVSS 6.3)
• CVE-2026-82732 — Declared argument constraints not enforced on AshTypescript typed controller routes (CVSS 6.3)
• CVE-2026-82731 — Unescaped path parameters in AshTypescript generated TypeScript client allow request redirection (CVSS 2.3)
• CVE-2026-82730 — Authorization-redacted field values disclosed through AshTypescript result normalization (CVSS 8.2)
• CVE-2026-77950 — RPC error handler fails open in AshTypescript, disclosing unredacted errors (CVSS 6.3)
• CVE-2026-77856 — Unbounded atom creation from typed struct field names in AshTypescript field selector (CVSS 8.2)
• CVE-2026-74837 — Unbounded atom creation from client-supplied RPC field names in AshTypescript field formatter (CVSS 8.7)