Ash CVE-2021-45688

Private argument injection in the Ash Elixir framework (versions 3.0.0 through 3.29.2) allows end users to set action ar

Persistent record-level denial of service in the ash Elixir resource framework (versions 3.6.3-3.32.1) lets any actor wh

Integer overflow in Ash Framework's vector encoding corrupts stored vectors in any Elixir application using Ash versions

CPU exhaustion in Ash Framework's string type constraint handler allows denial of service against Elixir applications th

Memory exhaustion via decompression bomb in Ash Framework's keyset pagination can terminate Erlang nodes running version

Unbounded string storage in Ash Framework versions 0.10.0 through 3.32.x allows unauthenticated attackers to bypass max_

Memory exhaustion in Ash Framework's runtime filter engine allows an attacker controlling filter inputs to crash an Elix

Silent record overwrite in Ash's ETS and Mnesia data layers allows any actor who can supply a primary key on a create ac

Record-level authorization bypass in Ash (ash-project) versions 3.4.44 through 3.32.1 silently leaks denied records to a

Incorrect authorization in ash-project/ash (Elixir data framework) versions 3.13.2 through 3.32.1 causes relationship sc

Authorization policy bypass in Ash (Elixir framework) versions 3.29.0-3.32.1 permits any application actor to modify rec

Constraint bypass in Ash Framework's CiString type allows storing string values that violate configured length or match