Lucene search
+L

2 matches found

OSV
OSV
added 2026/08/30 6:17 p.m.9 views

EEF-CVE-2026-82367 Re-entrant synchronous publish in AshGraphql subscription batcher delivers one subscriber's records to another's topic

Summary Exposure of Data Element to Wrong Session vulnerability in ash-project ashgraphql can deliver one subscription's resolved records to a different subscriber's topic. AshGraphql.Subscription.Batcher.dosend/5 reads the resolved batch from the process dictionary via Process.get:batchresolved...

2.3CVSS6AI score0.00245EPSS
SaveExploits0References4
Rows per page
Query Builder