2 matches found
EEF-CVE-2026-80227 SQL string_trim removes only spaces, diverging from in-memory trimming in AshSql
Summary Incorrect Comparison vulnerability in ash-project ashsql allows a user to pad a string field with tab, newline, carriage-return, or form-feed characters and pass a trimmed uniqueness or equality check in the database that the same expression would fail in memory or the reverse. stringtrim...
2.1CVSS5.8AI score0.00257EPSS
SaveExploits0References4
PT-2026-83547
Name of the Vulnerable Software and Affected Versions ash sql versions 0.1.0 through 0.7.0 Description An incorrect comparison issue exists where a user can pad a string field with tab, newline, carriage-return, or form-feed characters to bypass trimmed uniqueness or equality checks. This occurs...
2.1CVSS5.8AI score0.00257EPSS
SaveExploits0References15
20