174 matches found
Incorrect Authorization
Overview ash is an A declarative, extensible framework for building Elixir applications. Affected versions of this package are vulnerable to Incorrect Authorization when running a bulk of action calls with a beforetransaction hook and no aftertransaction hook. A malicious user could cause a...
CVE-2025-48042
Incorrect Authorization vulnerability in ash-project ash allows Exploiting Incorrectly Configured Access Control Security Levels. This vulnerability is associated with program files lib/ash/actions/create/bulk.ex, lib/ash/actions/destroy/bulk.ex, lib/ash/actions/update/bulk.ex and program routine...
CVE-2025-48042 Before action hooks may execute in certain scenarios despite a request being forbidden
Incorrect Authorization vulnerability in ash-project ash allows Exploiting Incorrectly Configured Access Control Security Levels. This vulnerability is associated with program files lib/ash/actions/create/bulk.ex, lib/ash/actions/destroy/bulk.ex, lib/ash/actions/update/bulk.ex and program routine...
CVE-2025-48042 Before action hooks may execute in certain scenarios despite a request being forbidden
Incorrect Authorization vulnerability in ash-project ash allows Exploiting Incorrectly Configured Access Control Security Levels. This vulnerability is associated with program files lib/ash/actions/create/bulk.ex, lib/ash/actions/destroy/bulk.ex, lib/ash/actions/update/bulk.ex and program routine...
CVE-2025-48042 Before action hooks may execute in certain scenarios despite a request being forbidden
Incorrect Authorization vulnerability in ash-project ash allows Exploiting Incorrectly Configured Access Control Security Levels. This vulnerability is associated with program files lib/ash/actions/create/bulk.ex, lib/ash/actions/destroy/bulk.ex, lib/ash/actions/update/bulk.ex and program routine...
CVE-2025-48042
CVE-2025-48042 (ash) is an Incorrect Authorization vulnerability affecting ash where running a bulk action with a before_transaction hook and no after_transaction hook could cause a before_transaction to execute before authorization is checked. Affected versions are ash from pkg:hex/ash prior to ...
EEF-CVE-2025-48042 Before action hooks may execute in certain scenarios despite a request being forbidden
Summary Incorrect Authorization vulnerability in ash-project ash allows Exploiting Incorrectly Configured Access Control Security Levels. This vulnerability is associated with program files lib/ash/actions/create/bulk.ex, lib/ash/actions/destroy/bulk.ex, lib/ash/actions/update/bulk.ex and program...
Ash Framework 安全漏洞
Ash Framework is an Ash Framework open source framework for building Elixir applications. A security vulnerability exists in Ash Framework versions prior to 3.5.39 that stems from improper authorization and could lead to an access control bypass...
PT-2025-36416
Name of the Vulnerable Software and Affected Versions: ash versions prior to 3.5.39 Description: An incorrect authorization vulnerability exists in ash, allowing exploitation of incorrectly configured access control security levels. This issue is associated with program files...
Malicious code in ash-drag-drop (npm)
The package ash-drag-drop was found to contain malicious code...
Malicious code in ash-bmadi-535bf-fjord-project (npm)
The package ash-bmadi-535bf-fjord-project was found to contain malicious code...
MAL-2025-15723 Malicious code in birch-a5vvj-zhve1-ash-project (npm)
The package birch-a5vvj-zhve1-ash-project was found to contain malicious code...
Malicious code in moondust-pyxu5-vbgaq-ash-project (npm)
The package moondust-pyxu5-vbgaq-ash-project was found to contain malicious code...
Malicious code in ash-5grfr-jsbt8-crystal-project (npm)
The package ash-5grfr-jsbt8-crystal-project was found to contain malicious code...
Malicious code in ash-1fcz8-nntfy-paradise-project (npm)
The package ash-1fcz8-nntfy-paradise-project was found to contain malicious code...
Malicious code in ash-history (npm)
The package ash-history was found to contain malicious code...
Malicious code in grove-1tzhe-m74x3-ash-project (npm)
The package grove-1tzhe-m74x3-ash-project was found to contain malicious code...
Malicious code in ash-profile (npm)
The package ash-profile was found to contain malicious code...
Malicious code in birch-a5vvj-zhve1-ash-project (npm)
The package birch-a5vvj-zhve1-ash-project was found to contain malicious code...
Malicious code in ash-q3gt7-hrboq-whisper-project (npm)
The package ash-q3gt7-hrboq-whisper-project was found to contain malicious code...