Zach Daniel / Ash Project

AshAdmin composite primary key decoding accepts arbitrary fields, enabling a secret-attribute oracle

Cross-tenant subscription disclosure in AshGraphql authorizes notifications in memory without a tenant-scoped read

Query-complexity limit bypass via first/last pagination arguments in AshGraphql enables denial of service

Unhandled KeyError in AshGraphql relay node resolution crashes queries via an unknown type segment

Broken access control in AshPhoenix SubdomainHook via a nil tenant in handle_subdomain

AshPhoenix FilterForm allows filtering across non-public relationships, disclosing private related data

Broken access control in AshGraphql subscription batcher applies authorization suppression to only the first notification

exists/2 predicate silently dropped on limited relationships with a parent() filter in AshSql

Same-named aggregates with differing filters are conflated in AshSql

Unescaped backslash allows LIKE wildcard injection in AshSql string search