CVE-2025-48042 Before action hooks may execute in certain scenarios despite a request being forbidden

Incorrect Authorization vulnerability in ash-project ash allows Exploiting Incorrectly Configured Access Control Security Levels. This vulnerability is associated with program files lib/ash/actions/create/bulk.ex, lib/ash/actions/destroy/bulk.ex, lib/ash/actions/update/bulk.ex and program routine...

CVE-2025-48042 Before action hooks may execute in certain scenarios despite a request being forbidden

Incorrect Authorization vulnerability in ash-project ash allows Exploiting Incorrectly Configured Access Control Security Levels. This vulnerability is associated with program files lib/ash/actions/create/bulk.ex, lib/ash/actions/destroy/bulk.ex, lib/ash/actions/update/bulk.ex and program routine...

Malicious code in moondust-pyxu5-vbgaq-ash-project (npm)

The package moondust-pyxu5-vbgaq-ash-project was found to contain malicious code...

Malicious code in grove-1tzhe-m74x3-ash-project (npm)

The package grove-1tzhe-m74x3-ash-project was found to contain malicious code...

Malicious code in birch-a5vvj-zhve1-ash-project (npm)

The package birch-a5vvj-zhve1-ash-project was found to contain malicious code...

MAL-2025-15723 Malicious code in birch-a5vvj-zhve1-ash-project (npm)

The package birch-a5vvj-zhve1-ash-project was found to contain malicious code...

MAL-2025-26683 Malicious code in moondust-pyxu5-vbgaq-ash-project (npm)

The package moondust-pyxu5-vbgaq-ash-project was found to contain malicious code...

CVE-2025-4754

Insufficient Session Expiration vulnerability in ash-project ashauthenticationphoenix allows Session Hijacking. This vulnerability is associated with program files lib/ashauthenticationphoenix/controller.ex. This issue affects ashauthenticationphoenix until 2.10.0...