VYPR

Ash SQL

by Ash Project

CVEs (1)

  • CVE-2026-81316LowAug 30, 2026
    risk 0.07cvss epss

    Incorrect Authorization vulnerability in ash-project ash_sql allows a caller to receive an aggregate value computed over rows a more restrictive filter should have excluded, disclosing counts, sums, or lists across an authorization or tenancy boundary. …