ash_typescript (Hex)
Advisories
8
Latest version
—
License
—
OpenSSF Scorecard
—
How to fix
Upgrading to 0.19.1 or later clears every advisory below that has a fix.
Upgrade commands
mix
{:ash_typescript, "~> 0.19.1"} # then: mix deps.update ash_typescriptKnown vulnerabilities
| Advisory | Severity | Affected | Fixed in |
|---|---|---|---|
| EEF-CVE-2026-105283 Internal error terms inspected into AshTypescript RPC error responses |
Not rated yet EPSS 0.41% |
>= 0.1.0, < 0.19.1 | 0.19.1 |
| EEF-CVE-2026-82731 Unescaped path parameters in AshTypescript generated TypeScript client allow request redirection |
Not rated yet EPSS 0.50% |
>= 0.15.0, < 0.18.0 | 0.18.0 |
| EEF-CVE-2026-74837 Unbounded atom creation from client-supplied RPC field names in AshTypescript field formatter |
Not rated yet EPSS 0.55% |
>= 0.1.0, < 0.18.0 | 0.18.0 |
| EEF-CVE-2026-82733 Route handler return value echoed into AshTypescript error response |
Not rated yet EPSS 0.55% |
>= 0.15.0, < 0.18.0 | 0.18.0 |
| EEF-CVE-2026-82732 Declared argument constraints not enforced on AshTypescript typed controller routes |
Not rated yet EPSS 0.68% |
>= 0.15.0, < 0.18.0 | 0.18.0 |
| EEF-CVE-2026-82730 Authorization-redacted field values disclosed through AshTypescript result normalization |
Not rated yet EPSS 0.50% |
>= 0.11.0, < 0.18.0 | 0.18.0 |
| EEF-CVE-2026-77950 RPC error handler fails open in AshTypescript, disclosing unredacted errors |
Not rated yet EPSS 0.55% |
>= 0.8.0, < 0.18.0 | 0.18.0 |
| EEF-CVE-2026-77856 Unbounded atom creation from typed struct field names in AshTypescript field selector |
Not rated yet EPSS 0.55% |
>= 0.11.0, < 0.18.0 | 0.18.0 |
MergeHarbor checks every repository's dependencies against this database, ranks what matters by exploitability and reachability, routes it to the owning team and opens the fix pull request.
Check your repos with MergeHarbor