EUVD-2025-33747

Ash Framework: Filter authorization misapplies impossible bypass/runtime policies...

CVE-2025-48043 Bypass and runtime policies that can never pass may be incorrectly applied in filter authorization

Incorrect Authorization vulnerability in ash-project ash allows Authentication Bypass. This vulnerability is associated with program files lib/ash/policy/authorizer/authorizer.ex and program routines 'Elixir.Ash.Policy.Authorizer':strictfilters/2. This issue affects ash: from 0.1.0 before 3.6.2...

EUVD-2012-0007

Malware in sbrugna...

EUVD-2020-21937

Malware in sbrugna...

EUVD-2024-0647

Malicious code in bioql PyPI...

EUVD-2022-1853

Malicious code in bioql PyPI...

EUVD-2022-1640

Malicious code in bioql PyPI...

EUVD-2025-18986

Malicious code in bioql PyPI...

EUVD-2023-0736

Malicious code in bioql PyPI...

EUVD-2022-5873

Malicious code in bioql PyPI...

EUVD-2021-34257

Malicious code in bioql PyPI...

EUVD-2022-1819

Malicious code in bioql PyPI...

EUVD-2022-1597

Malicious code in bioql PyPI...

EUVD-2025-4088

Malicious code in bioql PyPI...

EUVD-2024-16924

Malicious code in bioql PyPI...

EUVD-2022-2876

Malicious code in bioql PyPI...

EUVD-2022-1690

Malicious code in bioql PyPI...

CVE-2025-48042

Incorrect Authorization vulnerability in ash-project ash allows Exploiting Incorrectly Configured Access Control Security Levels. This vulnerability is associated with program files lib/ash/actions/create/bulk.ex, lib/ash/actions/destroy/bulk.ex, lib/ash/actions/update/bulk.ex and program routine...

CVE-2025-48042 Before action hooks may execute in certain scenarios despite a request being forbidden

Incorrect Authorization vulnerability in ash-project ash allows Exploiting Incorrectly Configured Access Control Security Levels. This vulnerability is associated with program files lib/ash/actions/create/bulk.ex, lib/ash/actions/destroy/bulk.ex, lib/ash/actions/update/bulk.ex and program routine...

PT-2025-36416

Name of the Vulnerable Software and Affected Versions ash versions prior to 3.5.39 Description An incorrect authorization vulnerability exists in ash, allowing exploitation of incorrectly configured access control security levels. This issue is associated with program files...