CVE-2026-78228

CVE-2026-78228 is an uncontrolled recursion vulnerability in ash_oban (ash-project), affecting versions from 0.8.0-rc.1 before 0.8.14 . The root cause lies in the generated worker's atomic handle_error/4 function: when a trigger's on_error action raises on a job's final attempt, the rescue clause...

CVE-2026-78038

ash_oban (an Elixir library bridging Ash and Oban) contains an improperly controlled modification of dynamically-determined object attributes flaw in AshOban.build_trigger/3. The function builds trusted job arguments with atom keys and merges caller-supplied :args underneath, intending trusted va...