Security releases
Researcher credits in vendor advisories
Vendors name researchers in their own advisories. Find your line and claim it. It counts on your profile right away and gets a BugRater ID you can quote.
Vendor
-
Ash-project CVE-2026-119613
Generation of Error Message Containing Sensitive Information vulnerability in ash-project ash_ai allows a caller of an AshAi tool to read internal error details
1 CVE and 1 credit line. Not claimed yet.
0 of 1 credit line claimed Claim credit
-
Ash-project CVE-2026-96581
Authorization Bypass Through User-Controlled Key vulnerability in ash-project ash allows a user of one tenant to read, overwrite and take over another tenant's
1 CVE and 1 credit line. Not claimed yet.
0 of 1 credit line claimed Claim credit
-
Ash-project CVE-2026-115635
Incorrect Authorization vulnerability in ash-project ash_postgres allows a user to read another tenant's record through a skipped upsert. When Ash.bulk_create/
1 CVE and 1 credit line. Not claimed yet.
0 of 1 credit line claimed Claim credit -
Ash-project CVE-2026-115627
Incorrect Authorization vulnerability in ash-project ash_postgres allows a user to load destination records linked to a source record only through another tenan
1 CVE and 1 credit line. Not claimed yet.
0 of 1 credit line claimed Claim credit -
Ash-project CVE-2026-114214
Incorrect Authorization vulnerability in ash-project ash allows a client to read destination records unrelated to the source record through a through relationsh
1 CVE and 1 credit line. Not claimed yet.
0 of 1 credit line claimed Claim credit
-
Ash-project CVE-2026-105283
Generation of Error Message Containing Sensitive Information vulnerability in ash-project ash_typescript allows an unauthenticated attacker to read internal Eli
1 CVE and 1 credit line. Not claimed yet.
0 of 1 credit line claimed Claim credit
-
Ash-project ash-project-2026-10
Ash-project Security Releases - October 2026
1 CVE and 1 credit line. Not claimed yet.
0 of 1 credit line claimed Claim credit