Known Vulnerabilities for Ash Graphql by Ash-project
Listed below are 10 of the newest known vulnerabilities associated with "Ash Graphql" by "Ash-project".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-82291 json | HeyForm before 3.0.0-rc.8 reflects the request Origin header in CORS responses while allowing credentials, enabling cross-ori... | Not Provided | 2026-08-28 | 2026-08-28 |
| CVE-2026-81643 json | Incorrect Authorization vulnerability in ash-project ash_graphql delivers GraphQL subscription payloads for records a subscri... | Not Provided | 2026-08-30 | 2026-08-30 |
| CVE-2026-81636 json | Allocation of Resources Without Limits or Throttling vulnerability in ash-project ash_graphql allows an unauthenticated clien... | Not Provided | 2026-08-30 | 2026-08-30 |
| CVE-2026-81633 json | Improper Input Validation vulnerability in ash-project ash_graphql allows an unauthenticated client to crash a relay node(id:... | Not Provided | 2026-08-30 | 2026-08-30 |
| CVE-2026-80223 json | Incorrect Authorization vulnerability in ash-project ash_graphql allows an authenticated subscriber in one tenant to receive ... | Not Provided | 2026-08-30 | 2026-08-30 |
| CVE-2026-80051 json | github.com/graphql-go/graphql (GraphQL for Go) through 0.8.1 does not validate that a scalar variable value matches its decla... | Not Provided | 2026-08-25 | 2026-08-25 |
| CVE-2026-78693 json | Generation of Error Message Containing Sensitive Information vulnerability in ash-project ash_graphql allows a remote client ... | Not Provided | 2026-08-30 | 2026-08-30 |
| CVE-2026-77081 json | n8n before 1.123.69, 2.x before 2.33.4, and 2.x before 2.34.1 contain an allowed-domains bypass in the GraphQL node. When the... | Not Provided | 2026-08-20 | 2026-08-21 |
| CVE-2026-77076 json | n8n versions before 1.123.69, 2.33.4, and 2.34.1 contain an information disclosure vulnerability in the GraphQL node. When a ... | Not Provided | 2026-08-20 | 2026-08-21 |
| CVE-2026-75005 json | Inefficient Algorithmic Complexity vulnerability in Apache APISIX. A single small request can pin a gateway worker at 100% ... | Not Provided | 2026-08-27 | 2026-08-27 |