Lucene search
+L

2 matches found

Cvelist
Cvelist
added 2026/08/30 6:17 p.m.27 views

CVE-2026-82367 Re-entrant synchronous publish in AshGraphql subscription batcher delivers one subscriber's records to another's topic

Exposure of Data Element to Wrong Session vulnerability in ash-project ashgraphql can deliver one subscription's resolved records to a different subscriber's topic. AshGraphql.Subscription.Batcher.dosend/5 reads the resolved batch from the process dictionary via Process.get:batchresolved and then...

2.3CVSS0.00245EPSS
SaveExploits0References4
Rows per page
Query Builder