{"meta":{"links":{"Changelog":"https://github.com/ash-project/ash_admin/blob/main/CHANGELOG.md","Discord":"https://discord.gg/HTHRaaVPUc","Forum":"https://elixirforum.com/c/elixir-framework-forums/ash-framework-forum","GitHub":"https://github.com/ash-project/ash_admin","REUSE Compliance":"https://api.reuse.software/info/github.com/ash-project/ash_admin","Website":"https://ash-hq.org"},"description":"A super-admin UI for Ash Framework, built with Phoenix LiveView.","licenses":["MIT"],"maintainers":[]},"name":"ash_admin","url":"https://hex.pm/api/packages/ash_admin","owners":[{"url":"https://hex.pm/api/users/ash-project","email":"ash-project@zachdaniel.dev","username":"ash-project"}],"inserted_at":"2021-03-22T06:43:06.022506Z","updated_at":"2026-09-04T17:38:41.774314Z","repository":"hexpm","releases":[{"version":"1.3.2","url":"https://hex.pm/api/packages/ash_admin/releases/1.3.2","has_docs":true,"inserted_at":"2026-09-04T17:38:40.751620Z"},{"version":"1.3.1","url":"https://hex.pm/api/packages/ash_admin/releases/1.3.1","has_docs":true,"inserted_at":"2026-08-31T01:10:23.979057Z"},{"version":"1.3.0","url":"https://hex.pm/api/packages/ash_admin/releases/1.3.0","has_docs":true,"inserted_at":"2026-08-12T21:30:59.321928Z"},{"version":"1.2.0","url":"https://hex.pm/api/packages/ash_admin/releases/1.2.0","has_docs":true,"inserted_at":"2026-07-20T17:19:15.328305Z"},{"version":"1.1.0","url":"https://hex.pm/api/packages/ash_admin/releases/1.1.0","has_docs":true,"inserted_at":"2026-04-13T00:42:47.755678Z"},{"version":"1.0.0-rc.0","url":"https://hex.pm/api/packages/ash_admin/releases/1.0.0-rc.0","has_docs":true,"inserted_at":"2026-03-02T06:25:24.271739Z"},{"version":"0.14.0","url":"https://hex.pm/api/packages/ash_admin/releases/0.14.0","has_docs":true,"inserted_at":"2026-02-11T16:21:08.860642Z"},{"version":"0.13.26","url":"https://hex.pm/api/packages/ash_admin/releases/0.13.26","has_docs":true,"inserted_at":"2026-02-11T13:52:54.172435Z"},{"version":"0.13.25","url":"https://hex.pm/api/packages/ash_admin/releases/0.13.25","has_docs":true,"inserted_at":"2026-02-11T05:14:47.654723Z"},{"version":"0.13.24","url":"https://hex.pm/api/packages/ash_admin/releases/0.13.24","has_docs":true,"inserted_at":"2025-12-05T13:38:57.218862Z"},{"version":"0.13.23","url":"https://hex.pm/api/packages/ash_admin/releases/0.13.23","has_docs":true,"inserted_at":"2025-10-30T23:09:00.442788Z"},{"version":"0.13.22","url":"https://hex.pm/api/packages/ash_admin/releases/0.13.22","has_docs":true,"inserted_at":"2025-10-30T20:51:16.081483Z"},{"version":"0.13.21","url":"https://hex.pm/api/packages/ash_admin/releases/0.13.21","has_docs":true,"inserted_at":"2025-10-30T17:29:53.031058Z"},{"version":"0.13.20","url":"https://hex.pm/api/packages/ash_admin/releases/0.13.20","has_docs":true,"inserted_at":"2025-10-24T22:44:37.263843Z"},{"version":"0.13.19","url":"https://hex.pm/api/packages/ash_admin/releases/0.13.19","has_docs":true,"inserted_at":"2025-09-24T18:31:01.281964Z"},{"version":"0.13.18","url":"https://hex.pm/api/packages/ash_admin/releases/0.13.18","has_docs":true,"inserted_at":"2025-08-31T02:28:29.302247Z"},{"version":"0.13.17","url":"https://hex.pm/api/packages/ash_admin/releases/0.13.17","has_docs":true,"inserted_at":"2025-08-21T22:15:18.239327Z"},{"version":"0.13.16","url":"https://hex.pm/api/packages/ash_admin/releases/0.13.16","has_docs":true,"inserted_at":"2025-08-18T22:14:40.462378Z"},{"version":"0.13.15","url":"https://hex.pm/api/packages/ash_admin/releases/0.13.15","has_docs":true,"inserted_at":"2025-08-18T21:48:30.173985Z"},{"version":"0.13.14","url":"https://hex.pm/api/packages/ash_admin/releases/0.13.14","has_docs":true,"inserted_at":"2025-08-07T02:18:24.255114Z"},{"version":"0.13.13","url":"https://hex.pm/api/packages/ash_admin/releases/0.13.13","has_docs":true,"inserted_at":"2025-07-29T21:32:12.445804Z"},{"version":"0.13.12","url":"https://hex.pm/api/packages/ash_admin/releases/0.13.12","has_docs":true,"inserted_at":"2025-07-17T14:15:31.650934Z"},{"version":"0.13.11","url":"https://hex.pm/api/packages/ash_admin/releases/0.13.11","has_docs":true,"inserted_at":"2025-07-02T14:15:05.279724Z"},{"version":"0.13.10","url":"https://hex.pm/api/packages/ash_admin/releases/0.13.10","has_docs":true,"inserted_at":"2025-06-18T23:44:38.775407Z"},{"version":"0.13.9","url":"https://hex.pm/api/packages/ash_admin/releases/0.13.9","has_docs":true,"inserted_at":"2025-06-06T21:44:08.714884Z"},{"version":"0.13.8","url":"https://hex.pm/api/packages/ash_admin/releases/0.13.8","has_docs":true,"inserted_at":"2025-06-06T03:32:10.478345Z"},{"version":"0.13.7","url":"https://hex.pm/api/packages/ash_admin/releases/0.13.7","has_docs":true,"inserted_at":"2025-06-04T15:07:47.882635Z"},{"version":"0.13.6","url":"https://hex.pm/api/packages/ash_admin/releases/0.13.6","has_docs":true,"inserted_at":"2025-06-01T10:51:32.683595Z"},{"version":"0.13.5","url":"https://hex.pm/api/packages/ash_admin/releases/0.13.5","has_docs":true,"inserted_at":"2025-05-20T14:31:41.566245Z"},{"version":"0.13.4","url":"https://hex.pm/api/packages/ash_admin/releases/0.13.4","has_docs":true,"inserted_at":"2025-04-09T23:07:23.646642Z"},{"version":"0.13.3","url":"https://hex.pm/api/packages/ash_admin/releases/0.13.3","has_docs":true,"inserted_at":"2025-03-18T20:38:07.705903Z"},{"version":"0.13.2","url":"https://hex.pm/api/packages/ash_admin/releases/0.13.2","has_docs":true,"inserted_at":"2025-03-05T23:54:23.514512Z"},{"version":"0.13.1","url":"https://hex.pm/api/packages/ash_admin/releases/0.13.1","has_docs":true,"inserted_at":"2025-02-22T00:12:26.267287Z"},{"version":"0.13.0","url":"https://hex.pm/api/packages/ash_admin/releases/0.13.0","has_docs":true,"inserted_at":"2025-02-17T23:13:50.125607Z"},{"version":"0.12.6","url":"https://hex.pm/api/packages/ash_admin/releases/0.12.6","has_docs":true,"inserted_at":"2025-01-13T04:49:12.543785Z"},{"version":"0.12.5","url":"https://hex.pm/api/packages/ash_admin/releases/0.12.5","has_docs":true,"inserted_at":"2025-01-06T22:08:39.204148Z"},{"version":"0.12.4","url":"https://hex.pm/api/packages/ash_admin/releases/0.12.4","has_docs":true,"inserted_at":"2025-01-03T01:30:42.197406Z"},{"version":"0.12.3","url":"https://hex.pm/api/packages/ash_admin/releases/0.12.3","has_docs":true,"inserted_at":"2024-12-19T13:45:43.719658Z"},{"version":"0.12.2","url":"https://hex.pm/api/packages/ash_admin/releases/0.12.2","has_docs":true,"inserted_at":"2024-12-17T21:45:49.038107Z"},{"version":"0.12.1","url":"https://hex.pm/api/packages/ash_admin/releases/0.12.1","has_docs":true,"inserted_at":"2024-12-17T19:39:58.310818Z"},{"version":"0.12.0","url":"https://hex.pm/api/packages/ash_admin/releases/0.12.0","has_docs":true,"inserted_at":"2024-12-12T22:51:59.011886Z"},{"version":"0.11.11","url":"https://hex.pm/api/packages/ash_admin/releases/0.11.11","has_docs":true,"inserted_at":"2024-10-30T02:12:29.729142Z"},{"version":"0.11.10","url":"https://hex.pm/api/packages/ash_admin/releases/0.11.10","has_docs":true,"inserted_at":"2024-10-29T03:36:13.765425Z"},{"version":"0.11.9","url":"https://hex.pm/api/packages/ash_admin/releases/0.11.9","has_docs":true,"inserted_at":"2024-10-17T21:02:41.845317Z"},{"version":"0.11.8","url":"https://hex.pm/api/packages/ash_admin/releases/0.11.8","has_docs":true,"inserted_at":"2024-10-17T20:41:40.736887Z"},{"version":"0.11.7","url":"https://hex.pm/api/packages/ash_admin/releases/0.11.7","has_docs":true,"inserted_at":"2024-10-17T19:45:01.922740Z"},{"version":"0.11.6","url":"https://hex.pm/api/packages/ash_admin/releases/0.11.6","has_docs":true,"inserted_at":"2024-09-19T13:18:23.851371Z"},{"version":"0.11.5","url":"https://hex.pm/api/packages/ash_admin/releases/0.11.5","has_docs":true,"inserted_at":"2024-08-26T18:00:15.413132Z"},{"version":"0.11.4","url":"https://hex.pm/api/packages/ash_admin/releases/0.11.4","has_docs":true,"inserted_at":"2024-08-01T01:03:05.109216Z"},{"version":"0.11.3","url":"https://hex.pm/api/packages/ash_admin/releases/0.11.3","has_docs":true,"inserted_at":"2024-06-25T16:56:33.924508Z"},{"version":"0.11.2","url":"https://hex.pm/api/packages/ash_admin/releases/0.11.2","has_docs":true,"inserted_at":"2024-06-25T15:22:08.059209Z"},{"version":"0.11.1","url":"https://hex.pm/api/packages/ash_admin/releases/0.11.1","has_docs":true,"inserted_at":"2024-06-13T17:50:33.785684Z"},{"version":"0.11.0","url":"https://hex.pm/api/packages/ash_admin/releases/0.11.0","has_docs":true,"inserted_at":"2024-05-22T03:51:49.833815Z"},{"version":"0.10.12","url":"https://hex.pm/api/packages/ash_admin/releases/0.10.12","has_docs":true,"inserted_at":"2024-06-25T16:47:20.995416Z"},{"version":"0.10.11","url":"https://hex.pm/api/packages/ash_admin/releases/0.10.11","has_docs":true,"inserted_at":"2024-06-25T14:22:41.820359Z"},{"version":"0.10.10","url":"https://hex.pm/api/packages/ash_admin/releases/0.10.10","has_docs":true,"inserted_at":"2024-05-10T22:33:46.759433Z"},{"version":"0.10.10-rc.1","url":"https://hex.pm/api/packages/ash_admin/releases/0.10.10-rc.1","has_docs":true,"inserted_at":"2024-04-03T02:02:45.585651Z"},{"version":"0.10.10-rc.0","url":"https://hex.pm/api/packages/ash_admin/releases/0.10.10-rc.0","has_docs":true,"inserted_at":"2024-04-02T16:00:12.068146Z"},{"version":"0.10.9","url":"https://hex.pm/api/packages/ash_admin/releases/0.10.9","has_docs":true,"inserted_at":"2024-04-02T15:54:39.008699Z"},{"version":"0.10.8","url":"https://hex.pm/api/packages/ash_admin/releases/0.10.8","has_docs":true,"inserted_at":"2024-03-19T04:11:58.487741Z"},{"version":"0.10.7","url":"https://hex.pm/api/packages/ash_admin/releases/0.10.7","has_docs":true,"inserted_at":"2024-02-26T14:59:12.903364Z"},{"version":"0.10.6","url":"https://hex.pm/api/packages/ash_admin/releases/0.10.6","has_docs":true,"inserted_at":"2024-02-20T20:46:08.962211Z"},{"version":"0.10.5","url":"https://hex.pm/api/packages/ash_admin/releases/0.10.5","has_docs":true,"inserted_at":"2024-02-11T16:58:10.707238Z"},{"version":"0.10.4","url":"https://hex.pm/api/packages/ash_admin/releases/0.10.4","has_docs":true,"inserted_at":"2024-02-04T15:48:24.322208Z"},{"version":"0.10.3","url":"https://hex.pm/api/packages/ash_admin/releases/0.10.3","has_docs":true,"inserted_at":"2024-02-04T15:42:15.375805Z"},{"version":"0.10.2","url":"https://hex.pm/api/packages/ash_admin/releases/0.10.2","has_docs":true,"inserted_at":"2024-01-04T19:47:43.227891Z"},{"version":"0.10.1","url":"https://hex.pm/api/packages/ash_admin/releases/0.10.1","has_docs":true,"inserted_at":"2023-12-27T12:16:27.185884Z"},{"version":"0.10.0","url":"https://hex.pm/api/packages/ash_admin/releases/0.10.0","has_docs":true,"inserted_at":"2023-11-30T15:24:33.511539Z"},{"version":"0.9.8","url":"https://hex.pm/api/packages/ash_admin/releases/0.9.8","has_docs":true,"inserted_at":"2023-11-17T09:20:35.337092Z"},{"version":"0.9.7","url":"https://hex.pm/api/packages/ash_admin/releases/0.9.7","has_docs":true,"inserted_at":"2023-11-16T13:42:14.699421Z"},{"version":"0.9.6","url":"https://hex.pm/api/packages/ash_admin/releases/0.9.6","has_docs":true,"inserted_at":"2023-11-15T20:30:08.537148Z"},{"version":"0.9.5","url":"https://hex.pm/api/packages/ash_admin/releases/0.9.5","has_docs":true,"inserted_at":"2023-10-11T13:09:16.515454Z"},{"version":"0.9.4","url":"https://hex.pm/api/packages/ash_admin/releases/0.9.4","has_docs":true,"inserted_at":"2023-08-04T19:19:11.208809Z"},{"version":"0.9.3","url":"https://hex.pm/api/packages/ash_admin/releases/0.9.3","has_docs":true,"inserted_at":"2023-08-02T23:59:03.129045Z"},{"version":"0.9.2","url":"https://hex.pm/api/packages/ash_admin/releases/0.9.2","has_docs":true,"inserted_at":"2023-08-02T22:10:26.084272Z"},{"version":"0.9.1","url":"https://hex.pm/api/packages/ash_admin/releases/0.9.1","has_docs":true,"inserted_at":"2023-08-02T21:34:19.628345Z"},{"version":"0.9.0","url":"https://hex.pm/api/packages/ash_admin/releases/0.9.0","has_docs":true,"inserted_at":"2023-07-28T15:58:32.896050Z"},{"version":"0.8.1","url":"https://hex.pm/api/packages/ash_admin/releases/0.8.1","has_docs":true,"inserted_at":"2023-04-22T14:20:56.422354Z"},{"version":"0.8.0","url":"https://hex.pm/api/packages/ash_admin/releases/0.8.0","has_docs":true,"inserted_at":"2023-03-01T21:26:35.331549Z"},{"version":"0.7.1","url":"https://hex.pm/api/packages/ash_admin/releases/0.7.1","has_docs":true,"inserted_at":"2022-12-12T15:16:41.121537Z"},{"version":"0.7.0","url":"https://hex.pm/api/packages/ash_admin/releases/0.7.0","has_docs":true,"inserted_at":"2022-10-31T21:19:49.619653Z"},{"version":"0.6.2","url":"https://hex.pm/api/packages/ash_admin/releases/0.6.2","has_docs":true,"inserted_at":"2022-10-20T17:44:07.648781Z"},{"version":"0.6.1","url":"https://hex.pm/api/packages/ash_admin/releases/0.6.1","has_docs":true,"inserted_at":"2022-10-20T03:54:44.782111Z"},{"version":"0.6.0-rc.2","url":"https://hex.pm/api/packages/ash_admin/releases/0.6.0-rc.2","has_docs":true,"inserted_at":"2022-09-28T04:01:05.273201Z"},{"version":"0.6.0-rc.1","url":"https://hex.pm/api/packages/ash_admin/releases/0.6.0-rc.1","has_docs":true,"inserted_at":"2022-09-15T21:10:29.641974Z"},{"version":"0.6.0-rc.0","url":"https://hex.pm/api/packages/ash_admin/releases/0.6.0-rc.0","has_docs":true,"inserted_at":"2022-08-31T05:49:45.651438Z"},{"version":"0.5.2","url":"https://hex.pm/api/packages/ash_admin/releases/0.5.2","has_docs":true,"inserted_at":"2022-08-22T20:43:28.790935Z"},{"version":"0.5.1-rc.0","url":"https://hex.pm/api/packages/ash_admin/releases/0.5.1-rc.0","has_docs":true,"inserted_at":"2022-08-15T19:47:51.205246Z"},{"version":"0.5.0","url":"https://hex.pm/api/packages/ash_admin/releases/0.5.0","has_docs":true,"inserted_at":"2022-08-10T21:34:16.625597Z"},{"version":"0.4.5-rc.0","url":"https://hex.pm/api/packages/ash_admin/releases/0.4.5-rc.0","has_docs":true,"inserted_at":"2022-05-23T07:03:05.298161Z"},{"version":"0.4.4","url":"https://hex.pm/api/packages/ash_admin/releases/0.4.4","has_docs":true,"inserted_at":"2022-03-17T18:20:51.538220Z"},{"version":"0.4.2","url":"https://hex.pm/api/packages/ash_admin/releases/0.4.2","has_docs":true,"inserted_at":"2022-03-17T04:27:17.567896Z"},{"version":"0.4.0","url":"https://hex.pm/api/packages/ash_admin/releases/0.4.0","has_docs":true,"inserted_at":"2021-11-14T05:25:14.236223Z"},{"version":"0.3.0-rc.0","url":"https://hex.pm/api/packages/ash_admin/releases/0.3.0-rc.0","has_docs":true,"inserted_at":"2021-09-01T06:44:18.874501Z"},{"version":"0.2.22","url":"https://hex.pm/api/packages/ash_admin/releases/0.2.22","has_docs":true,"inserted_at":"2021-07-24T22:40:02.576002Z"},{"version":"0.2.21","url":"https://hex.pm/api/packages/ash_admin/releases/0.2.21","has_docs":true,"inserted_at":"2021-07-24T00:32:41.336427Z"},{"version":"0.2.20","url":"https://hex.pm/api/packages/ash_admin/releases/0.2.20","has_docs":true,"inserted_at":"2021-07-23T17:35:59.263456Z"},{"version":"0.2.19","url":"https://hex.pm/api/packages/ash_admin/releases/0.2.19","has_docs":true,"inserted_at":"2021-07-23T17:23:45.616028Z"},{"version":"0.2.18","url":"https://hex.pm/api/packages/ash_admin/releases/0.2.18","has_docs":true,"inserted_at":"2021-07-20T06:35:59.628830Z"},{"version":"0.2.17","url":"https://hex.pm/api/packages/ash_admin/releases/0.2.17","has_docs":true,"inserted_at":"2021-07-20T06:24:12.971261Z"},{"version":"0.2.16-rc.1","url":"https://hex.pm/api/packages/ash_admin/releases/0.2.16-rc.1","has_docs":true,"inserted_at":"2021-07-18T23:28:04.800152Z"},{"version":"0.2.16-rc.0","url":"https://hex.pm/api/packages/ash_admin/releases/0.2.16-rc.0","has_docs":true,"inserted_at":"2021-07-18T18:42:27.207559Z"},{"version":"0.2.15","url":"https://hex.pm/api/packages/ash_admin/releases/0.2.15","has_docs":true,"inserted_at":"2021-05-18T04:29:04.837145Z"},{"version":"0.2.14","url":"https://hex.pm/api/packages/ash_admin/releases/0.2.14","has_docs":true,"inserted_at":"2021-05-14T05:26:36.188848Z"},{"version":"0.2.13","url":"https://hex.pm/api/packages/ash_admin/releases/0.2.13","has_docs":true,"inserted_at":"2021-05-13T00:10:56.515962Z"},{"version":"0.2.12","url":"https://hex.pm/api/packages/ash_admin/releases/0.2.12","has_docs":true,"inserted_at":"2021-05-10T05:37:01.442267Z"},{"version":"0.2.11","url":"https://hex.pm/api/packages/ash_admin/releases/0.2.11","has_docs":true,"inserted_at":"2021-05-06T21:26:19.747545Z"},{"version":"0.2.10","url":"https://hex.pm/api/packages/ash_admin/releases/0.2.10","has_docs":true,"inserted_at":"2021-04-17T19:27:51.315890Z"},{"version":"0.2.9","url":"https://hex.pm/api/packages/ash_admin/releases/0.2.9","has_docs":true,"inserted_at":"2021-04-16T17:12:49.746991Z"},{"version":"0.2.8","url":"https://hex.pm/api/packages/ash_admin/releases/0.2.8","has_docs":true,"inserted_at":"2021-04-15T03:53:38.090692Z"},{"version":"0.2.7","url":"https://hex.pm/api/packages/ash_admin/releases/0.2.7","has_docs":true,"inserted_at":"2021-04-09T20:47:05.772643Z"},{"version":"0.2.6","url":"https://hex.pm/api/packages/ash_admin/releases/0.2.6","has_docs":true,"inserted_at":"2021-04-09T04:40:27.282360Z"},{"version":"0.2.5","url":"https://hex.pm/api/packages/ash_admin/releases/0.2.5","has_docs":true,"inserted_at":"2021-03-30T06:01:44.249820Z"},{"version":"0.2.4","url":"https://hex.pm/api/packages/ash_admin/releases/0.2.4","has_docs":true,"inserted_at":"2021-03-30T04:16:44.795692Z"},{"version":"0.2.3","url":"https://hex.pm/api/packages/ash_admin/releases/0.2.3","has_docs":true,"inserted_at":"2021-03-29T19:46:24.915116Z"},{"version":"0.2.1","url":"https://hex.pm/api/packages/ash_admin/releases/0.2.1","has_docs":true,"inserted_at":"2021-03-28T22:36:34.753038Z"},{"version":"0.1.6","url":"https://hex.pm/api/packages/ash_admin/releases/0.1.6","has_docs":true,"inserted_at":"2021-03-25T17:15:32.354708Z"},{"version":"0.1.5","url":"https://hex.pm/api/packages/ash_admin/releases/0.1.5","has_docs":true,"inserted_at":"2021-03-24T14:23:12.687450Z"},{"version":"0.1.3","url":"https://hex.pm/api/packages/ash_admin/releases/0.1.3","has_docs":true,"inserted_at":"2021-03-23T01:40:10.650792Z"},{"version":"0.1.2","url":"https://hex.pm/api/packages/ash_admin/releases/0.1.2","has_docs":true,"inserted_at":"2021-03-22T23:30:07.561547Z"},{"version":"0.1.0","url":"https://hex.pm/api/packages/ash_admin/releases/0.1.0","has_docs":true,"inserted_at":"2021-03-22T06:43:06.040741Z"}],"html_url":"https://hex.pm/packages/ash_admin","latest_version":"1.3.2","downloads":{"all":525830,"day":1323,"recent":121857,"week":10871},"security_advisories":[{"id":"EEF-CVE-2026-82673","aliases":["CVE-2026-82673","GHSA-483p-rgcq-p5j9"],"references":[{"type":"ADVISORY","url":"https://github.com/ash-project/ash_admin/security/advisories/GHSA-483p-rgcq-p5j9"},{"type":"WEB","url":"https://cna.erlef.org/cves/CVE-2026-82673.html"},{"type":"FIX","url":"https://github.com/ash-project/ash_admin/commit/4bb41cb697f3d9be58462d727aed75aba76efc82"},{"type":"PACKAGE","url":"https://hex.pm/packages/ash_admin"}],"summary":"Path traversal in AshAdmin file uploads via unsanitized client filename","api_url":"https://api.osv.dev/v1/vulns/EEF-CVE-2026-82673","published_at":"2026-08-31T02:33:10Z","html_url":"https://osv.dev/vulnerability/EEF-CVE-2026-82673","cvss_score":8.3,"cvss_rating":"high","cvss_vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:H/SA:N","modified_at":"2026-09-08T03:45:06Z","withdrawn_at":null,"affected":[">= 0.13.7 and < 1.3.1"]},{"id":"EEF-CVE-2026-81853","aliases":["CVE-2026-81853","GHSA-jxr8-hpv2-qp38"],"references":[{"type":"PACKAGE","url":"https://hex.pm/packages/ash_admin"},{"type":"FIX","url":"https://github.com/ash-project/ash_admin/commit/3c3e905d47f1155dcc1ca3fb347348b05a66065a"},{"type":"WEB","url":"https://cna.erlef.org/cves/CVE-2026-81853.html"},{"type":"ADVISORY","url":"https://github.com/ash-project/ash_admin/security/advisories/GHSA-jxr8-hpv2-qp38"}],"summary":"AshAdmin composite primary key decoding accepts arbitrary fields, enabling a secret-attribute oracle","api_url":"https://api.osv.dev/v1/vulns/EEF-CVE-2026-81853","published_at":"2026-08-31T02:31:29Z","html_url":"https://osv.dev/vulnerability/EEF-CVE-2026-81853","cvss_score":2.3,"cvss_rating":"low","cvss_vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N","modified_at":"2026-09-08T03:30:04Z","withdrawn_at":null,"affected":[">= 0.1.0 and < 1.3.1"]},{"id":"EEF-CVE-2026-81852","aliases":["CVE-2026-81852","GHSA-whfj-rrrp-j597"],"references":[{"type":"ADVISORY","url":"https://github.com/ash-project/ash_admin/security/advisories/GHSA-whfj-rrrp-j597"},{"type":"WEB","url":"https://cna.erlef.org/cves/CVE-2026-81852.html"},{"type":"FIX","url":"https://github.com/ash-project/ash_admin/commit/bc7a1cdf873b16971a8efec35d085f8bb706314f"},{"type":"PACKAGE","url":"https://hex.pm/packages/ash_admin"}],"summary":"AshAdmin ships a hardcoded CSP nonce, allowing nonce-based CSP bypass","api_url":"https://api.osv.dev/v1/vulns/EEF-CVE-2026-81852","published_at":"2026-08-31T02:29:14Z","html_url":"https://osv.dev/vulnerability/EEF-CVE-2026-81852","cvss_score":2.1,"cvss_rating":"low","cvss_vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N","modified_at":"2026-09-08T03:45:07Z","withdrawn_at":null,"affected":[">= 0.10.8 and < 1.3.1"]},{"id":"EEF-CVE-2026-82681","aliases":["CVE-2026-82681","GHSA-j89q-xjrh-c26p"],"references":[{"type":"ADVISORY","url":"https://github.com/ash-project/ash_admin/security/advisories/GHSA-j89q-xjrh-c26p"},{"type":"PACKAGE","url":"https://hex.pm/packages/ash_admin"},{"type":"FIX","url":"https://github.com/ash-project/ash_admin/commit/8e8ef91e8ba07498053887c6212f8b0f08178df6"},{"type":"WEB","url":"https://cna.erlef.org/cves/CVE-2026-82681.html"}],"summary":"Query-parameter injection in AshAdmin row-action links via unencoded string primary keys","api_url":"https://api.osv.dev/v1/vulns/EEF-CVE-2026-82681","published_at":"2026-08-31T02:26:05Z","html_url":"https://osv.dev/vulnerability/EEF-CVE-2026-82681","cvss_score":2.0,"cvss_rating":"low","cvss_vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N","modified_at":"2026-09-08T03:45:09Z","withdrawn_at":null,"affected":[">= 0.3.0-rc.0 and < 1.3.1"]},{"id":"EEF-CVE-2026-77850","aliases":["CVE-2026-77850","GHSA-m23x-576h-73w8"],"references":[{"type":"ADVISORY","url":"https://github.com/ash-project/ash_admin/security/advisories/GHSA-m23x-576h-73w8"},{"type":"WEB","url":"https://cna.erlef.org/cves/CVE-2026-77850.html"},{"type":"FIX","url":"https://github.com/ash-project/ash_admin/commit/07289191ccdac27dd70ab7c6413ed057bc7fdade"},{"type":"PACKAGE","url":"https://hex.pm/packages/ash_admin"}],"summary":"Stored XSS in AshAdmin relationship typeahead via unescaped label_field content","api_url":"https://api.osv.dev/v1/vulns/EEF-CVE-2026-77850","published_at":"2026-08-31T02:23:54Z","html_url":"https://osv.dev/vulnerability/EEF-CVE-2026-77850","cvss_score":8.4,"cvss_rating":"high","cvss_vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","modified_at":"2026-09-08T03:45:05Z","withdrawn_at":null,"affected":[">= 0.13.0 and < 1.3.1"]},{"id":"EEF-CVE-2026-82722","aliases":["CVE-2026-82722","GHSA-wcr6-9rrw-5jhv"],"references":[{"type":"PACKAGE","url":"https://hex.pm/packages/ash_admin"},{"type":"FIX","url":"https://github.com/ash-project/ash_admin/commit/731dffa09416d68f4ad3a0b6ee146b285ca0083b"},{"type":"WEB","url":"https://cna.erlef.org/cves/CVE-2026-82722.html"},{"type":"ADVISORY","url":"https://github.com/ash-project/ash_admin/security/advisories/GHSA-wcr6-9rrw-5jhv"}],"summary":"AshAdmin LiveView events intern atoms from client input, exhausting the atom table (node DoS)","api_url":"https://api.osv.dev/v1/vulns/EEF-CVE-2026-82722","published_at":"2026-08-31T02:22:15Z","html_url":"https://osv.dev/vulnerability/EEF-CVE-2026-82722","cvss_score":8.3,"cvss_rating":"high","cvss_vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H","modified_at":"2026-09-08T03:45:02Z","withdrawn_at":null,"affected":[">= 0.1.0 and < 1.3.1"]},{"id":"EEF-CVE-2026-75757","aliases":["CVE-2026-75757","GHSA-3259-55fp-w94j"],"references":[{"type":"PACKAGE","url":"https://hex.pm/packages/ash_admin"},{"type":"FIX","url":"https://github.com/ash-project/ash_admin/commit/e93a3408a85035e1f90275d02bc2470c96095e56"},{"type":"WEB","url":"https://cna.erlef.org/cves/CVE-2026-75757.html"},{"type":"ADVISORY","url":"https://github.com/ash-project/ash_admin/security/advisories/GHSA-3259-55fp-w94j"}],"summary":"AshAdmin cookie reader matches names by substring, enabling actor/session shadowing from a sibling subdomain","api_url":"https://api.osv.dev/v1/vulns/EEF-CVE-2026-75757","published_at":"2026-08-31T02:20:17Z","html_url":"https://osv.dev/vulnerability/EEF-CVE-2026-75757","cvss_score":8.3,"cvss_rating":"high","cvss_vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N","modified_at":"2026-09-08T03:30:11Z","withdrawn_at":null,"affected":[">= 0.9.1 and < 1.3.1"]}],"docs_html_url":"https://ash-admin.hexdocs.pm/","retirements":{"0.10.10":{"message":"breaking change","reason":"other"}},"configs":{"erlang.mk":"dep_ash_admin = hex 1.3.2","mix.exs":"{:ash_admin, \"~> 1.3\"}","rebar.config":"{ash_admin, \"1.3.2\"}"},"latest_stable_version":"1.3.2"}