Security Advisories for ash_ai in hex
High
about 5 hours ago
AshAi vectorize change leaks raw embedding-provider errors, including credentials, in a user-facing error
hex
ash_ai
Medium
about 5 hours ago
AshAi echoes raw tool exception messages into the conversation, disclosing internal details
hex
ash_ai
Medium
about 5 hours ago
AshAi tool loop never terminates when all tool calls are filtered out, enabling denial of service
hex
ash_ai
High
about 5 hours ago
Identity tool filter in AshAi accepts operator maps, allowing update or destroy of unidentified records
hex
ash_ai
High
about 5 hours ago
MCP DNS-rebinding origin check in AshAi is bypassed by a spoofed X-Forwarded-Proto header
hex
ash_ai
Critical
about 5 hours ago
EEx template evaluation of prompt content in AshAi enables remote code execution
hex
ash_ai