How many CVEs does ash-project have?

ash-project has 10 published CVE records since 2024, including 9 in the last two years.

How many ash-project CVEs are in CISA KEV?

None of ash-project's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which ash-project products have the most CVEs?

The ash-project products with the most published CVEs are ash, ash_authentication_phoenix, ash_postgres.

What are the most common weakness types in ash-project CVEs?

ash-project's CVEs most often map to these CWE weakness types: CWE-863 (Incorrect Authorization), CWE-502 (Deserialization of Untrusted Data), CWE-400 (Uncontrolled Resource Consumption), CWE-915 (Improperly Controlled Modification of Dynamically-Determined Object Attributes).

Are there public exploits for ash-project vulnerabilities?

Yes — 5 of ash-project's CVEs have a known public exploit.

What is the average severity of ash-project CVEs?

The average CVSS base score across ash-project's scored CVEs is 6.2.

ash-project Vulnerabilities: CVEs, CISA KEV & Security Advisories

Average CVSS: 6.2
Critical / high: 50%
Actively exploited (KEV): 0%
Public exploit available: 50%
Patch available: 100%

ash-project Vulnerabilities

Overview

Security scorecard

Severity and exploitation

Most affected products

Common weakness types

CNAs that assign these CVEs

Disclosure activity by year

Latest ash-project CVEs

Other vendors

Frequently asked questions

References

Track ash-project vulnerabilities