Peter Ullrich

MCP DNS-rebinding origin check in AshAi is bypassed by a spoofed X-Forwarded-Proto header

EEx template evaluation of prompt content in AshAi enables remote code execution

Query-parameter injection in AshAdmin row-action links via unencoded string primary keys

AshAdmin ships a hardcoded CSP nonce, allowing nonce-based CSP bypass

Incomplete redaction re-attaches the original error path in AshGraphql, leaking internal field names

AshAdmin composite primary key decoding accepts arbitrary fields, enabling a secret-attribute oracle

Cross-tenant subscription disclosure in AshGraphql authorizes notifications in memory without a tenant-scoped read

Query-complexity limit bypass via first/last pagination arguments in AshGraphql enables denial of service

Unhandled KeyError in AshGraphql relay node resolution crashes queries via an unknown type segment

Broken access control in AshPhoenix SubdomainHook via a nil tenant in handle_subdomain