pkg:Hex/ash

All known vulnerabilities

• HIGH8.1CVE-2025-48044Ash has authorization bypass when bypass policy condition evaluates to true
  >= 3.6.3, < 3.7.1
• MEDIUM5.6CVE-2025-48042Before action, Ash's hooks may execute in certain scenarios despite a request being forbidden
  from 0, < 3.5.39
• —CVE-2026-34593Ash.Type.Module.cast_input/2 atom exhaustion via unchecked Module.concat allows BEAM VM crash
  from 0, < 3.22.0
• —Ash Framework: Filter authorization misapplies impossible bypass/runtime policies
  from 0, < 3.6.2