CVE Intelligence

Erlang Ash vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Erlang Ash: 3 record(s), with affected versions and fixes.

CVE-2025-48044 High · 8.6 CWE-863 Oct 17, 2025
Authorization bypass when bypass policy condition evaluates to true
Incorrect Authorization vulnerability in ash-project ash allows Authentication Bypass. This issue affects ash: from 3.6.3 before 3.7.1.
CVE-2025-48043 High · 8.6 CWE-863 Oct 10, 2025
Bypass and runtime policies that can never pass may be incorrectly applied in filter authorization
Incorrect Authorization vulnerability in ash-project ash allows Authentication Bypass. This issue affects ash: from 0.1.1 before 3.6.2.
CVE-2025-48042 High · 7.1 CWE-863 Sep 7, 2025
Before action hooks may execute in certain scenarios despite a request being forbidden
Incorrect Authorization vulnerability in ash-project ash allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects ash: from 0.1.1 before 3.5.39.