Vulnerabilidades do Erlang Ash
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam Erlang Ash: 3 registro(s), com versões afetadas e correções.
CVE-2025-48044
Alta · 8.6
CWE-863 17/10/2025
Authorization bypass when bypass policy condition evaluates to true
Incorrect Authorization vulnerability in ash-project ash allows Authentication Bypass.
This issue affects ash: from 3.6.3 before 3.7.1.
CVE-2025-48043
Alta · 8.6
CWE-863 10/10/2025
Bypass and runtime policies that can never pass may be incorrectly applied in filter authorization
Incorrect Authorization vulnerability in ash-project ash allows Authentication Bypass.
This issue affects ash: from 0.1.1 before 3.6.2.
CVE-2025-48042
Alta · 7.1
CWE-863 07/09/2025
Before action hooks may execute in certain scenarios despite a request being forbidden
Incorrect Authorization vulnerability in ash-project ash allows Exploiting Incorrectly Configured Access Control Security Levels.
This issue affects ash: from 0.1.1 before 3.5.39.