ash_admin
A super-admin UI for Ash Framework, built with Phoenix LiveView.
Security Advisories for ash_admin in hex
High
about 2 hours ago
Path traversal in AshAdmin file uploads via unsanitized client filename
hex
ash_admin
Low
about 2 hours ago
AshAdmin composite primary key decoding accepts arbitrary fields, enabling a secret-attribute oracle
hex
ash_admin
Low
about 2 hours ago
AshAdmin ships a hardcoded CSP nonce, allowing nonce-based CSP bypass
hex
ash_admin
Low
about 2 hours ago
Query-parameter injection in AshAdmin row-action links via unencoded string primary keys
hex
ash_admin
High
about 2 hours ago
Stored XSS in AshAdmin relationship typeahead via unescaped label_field content
hex
ash_admin
High
about 2 hours ago
AshAdmin LiveView events intern atoms from client input, exhausting the atom table (node DoS)
hex
ash_admin
High
about 2 hours ago
AshAdmin cookie reader matches names by substring, enabling actor/session shadowing from a sibling subdomain
hex
ash_admin