Peter Ullrich

Cloaked plaintext leaks through a non-sensitive action argument in AshCloak

Unsafe deserialization of decrypted terms enables node DoS in AshCloak

rename_tenant returns :ok on a failed rename, enabling cross-tenant access in AshPostgres

Sensitive attribute values stored in a non-sensitive public changes map in AshPaperTrail

Distinct-query aggregate drops the tenant schema prefix, leaking across tenants in AshSql

AshAi vectorize change leaks raw embedding-provider errors, including credentials, in a user-facing error

AshAdmin LiveView events intern atoms from client input, exhausting the atom table (node DoS)

AshAi echoes raw tool exception messages into the conversation, disclosing internal details

AshAi tool loop never terminates when all tool calls are filtered out, enabling denial of service

Stored XSS in AshAdmin relationship typeahead via unescaped label_field content