ash-project
Security Risk Profile
38
/100
lowSecurity Risk Score
Comprehensive risk assessment based on 3 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from October 10, 2025 to present
3
Total CVEs
2
Critical+High
0
Exploited
0
Unpatched
Threat Assessment
Avg CVSS
7.7
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
0
Critical/High
Risk Level
38/100
low
🆕 1Fresh (<7d)📈 1 in Last 30 Days
Severity Distribution
Critical
0High
2Medium
1Low
0Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
0Age Distribution
Common Weaknesses (CWE)
No CWE data available
Most Affected Products
1. ash-project ash3
2. erlang/ash2
Recent Vulnerabilities
See more →CVE-2026-69659
CVSS 5.9medium
Memory exhaustion via unbounded deserialization of keyset pagination cursors in Ash.Page.Keyset
8/9/2026🔧 No Patch
CVE-2025-48044
CVSS 8.6high
Authorization bypass when bypass policy condition evaluates to true
10/17/2025
CVE-2025-48043
CVSS 8.6high
Bypass and runtime policies that can never pass may be incorrectly applied in filter authorization
10/10/2025
Monitor ash-project in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.