{"meta":{"links":{"Changelog":"https://github.com/ash-project/ash_ai/blob/main/CHANGELOG.md","Discord":"https://discord.gg/HTHRaaVPUc","Forum":"https://elixirforum.com/c/ash-framework-forum/","GitHub":"https://github.com/ash-project/ash_ai","REUSE Compliance":"https://api.reuse.software/info/github.com/ash-project/ash_ai","Website":"https://ash-hq.org"},"description":"Integrated LLM features for your Ash application.","licenses":["MIT"],"maintainers":[]},"name":"ash_ai","url":"https://hex.pm/api/packages/ash_ai","owners":[{"url":"https://hex.pm/api/users/ash-project","email":"ash-project@zachdaniel.dev","username":"ash-project"}],"inserted_at":"2025-05-14T05:33:27.014745Z","updated_at":"2026-08-30T23:21:46.683438Z","repository":"hexpm","releases":[{"version":"1.0.0","url":"https://hex.pm/api/packages/ash_ai/releases/1.0.0","has_docs":true,"inserted_at":"2026-08-30T23:21:45.676410Z"},{"version":"0.8.2","url":"https://hex.pm/api/packages/ash_ai/releases/0.8.2","has_docs":true,"inserted_at":"2026-08-03T23:39:14.795298Z"},{"version":"0.8.1","url":"https://hex.pm/api/packages/ash_ai/releases/0.8.1","has_docs":true,"inserted_at":"2026-07-29T14:30:55.930867Z"},{"version":"0.8.0","url":"https://hex.pm/api/packages/ash_ai/releases/0.8.0","has_docs":true,"inserted_at":"2026-07-29T13:15:59.142918Z"},{"version":"0.7.3","url":"https://hex.pm/api/packages/ash_ai/releases/0.7.3","has_docs":true,"inserted_at":"2026-07-21T03:15:35.219692Z"},{"version":"0.7.2","url":"https://hex.pm/api/packages/ash_ai/releases/0.7.2","has_docs":true,"inserted_at":"2026-06-12T11:24:16.457929Z"},{"version":"0.7.1","url":"https://hex.pm/api/packages/ash_ai/releases/0.7.1","has_docs":true,"inserted_at":"2026-06-01T14:20:28.777301Z"},{"version":"0.7.0","url":"https://hex.pm/api/packages/ash_ai/releases/0.7.0","has_docs":true,"inserted_at":"2026-06-01T04:31:39.327505Z"},{"version":"0.6.1","url":"https://hex.pm/api/packages/ash_ai/releases/0.6.1","has_docs":true,"inserted_at":"2026-04-13T22:49:46.035598Z"},{"version":"0.6.0","url":"https://hex.pm/api/packages/ash_ai/releases/0.6.0","has_docs":true,"inserted_at":"2026-04-09T12:19:48.711253Z"},{"version":"0.5.0","url":"https://hex.pm/api/packages/ash_ai/releases/0.5.0","has_docs":true,"inserted_at":"2026-01-26T02:26:22.280255Z"},{"version":"0.4.0","url":"https://hex.pm/api/packages/ash_ai/releases/0.4.0","has_docs":true,"inserted_at":"2025-11-23T18:35:30.200402Z"},{"version":"0.3.0","url":"https://hex.pm/api/packages/ash_ai/releases/0.3.0","has_docs":true,"inserted_at":"2025-10-28T13:20:54.775764Z"},{"version":"0.2.14","url":"https://hex.pm/api/packages/ash_ai/releases/0.2.14","has_docs":true,"inserted_at":"2025-10-16T13:20:04.424215Z"},{"version":"0.2.13","url":"https://hex.pm/api/packages/ash_ai/releases/0.2.13","has_docs":true,"inserted_at":"2025-09-27T15:58:09.497420Z"},{"version":"0.2.12","url":"https://hex.pm/api/packages/ash_ai/releases/0.2.12","has_docs":true,"inserted_at":"2025-08-31T16:06:36.160429Z"},{"version":"0.2.11","url":"https://hex.pm/api/packages/ash_ai/releases/0.2.11","has_docs":true,"inserted_at":"2025-08-21T22:21:04.901207Z"},{"version":"0.2.10","url":"https://hex.pm/api/packages/ash_ai/releases/0.2.10","has_docs":true,"inserted_at":"2025-08-07T02:07:00.780592Z"},{"version":"0.2.9","url":"https://hex.pm/api/packages/ash_ai/releases/0.2.9","has_docs":true,"inserted_at":"2025-07-22T16:13:57.918554Z"},{"version":"0.2.8","url":"https://hex.pm/api/packages/ash_ai/releases/0.2.8","has_docs":true,"inserted_at":"2025-07-17T17:13:39.408727Z"},{"version":"0.2.7","url":"https://hex.pm/api/packages/ash_ai/releases/0.2.7","has_docs":true,"inserted_at":"2025-07-17T15:31:56.392031Z"},{"version":"0.2.6","url":"https://hex.pm/api/packages/ash_ai/releases/0.2.6","has_docs":true,"inserted_at":"2025-07-05T17:57:27.353633Z"},{"version":"0.2.5","url":"https://hex.pm/api/packages/ash_ai/releases/0.2.5","has_docs":true,"inserted_at":"2025-07-03T11:21:58.408102Z"},{"version":"0.2.4","url":"https://hex.pm/api/packages/ash_ai/releases/0.2.4","has_docs":true,"inserted_at":"2025-07-02T14:05:48.356722Z"},{"version":"0.2.3","url":"https://hex.pm/api/packages/ash_ai/releases/0.2.3","has_docs":true,"inserted_at":"2025-06-25T04:01:45.895447Z"},{"version":"0.2.2","url":"https://hex.pm/api/packages/ash_ai/releases/0.2.2","has_docs":true,"inserted_at":"2025-06-11T14:28:12.025392Z"},{"version":"0.2.1","url":"https://hex.pm/api/packages/ash_ai/releases/0.2.1","has_docs":true,"inserted_at":"2025-06-11T00:58:22.410095Z"},{"version":"0.2.0","url":"https://hex.pm/api/packages/ash_ai/releases/0.2.0","has_docs":true,"inserted_at":"2025-06-10T20:26:54.650734Z"},{"version":"0.1.11","url":"https://hex.pm/api/packages/ash_ai/releases/0.1.11","has_docs":true,"inserted_at":"2025-06-04T15:12:14.093183Z"},{"version":"0.1.10","url":"https://hex.pm/api/packages/ash_ai/releases/0.1.10","has_docs":true,"inserted_at":"2025-05-30T18:35:15.035825Z"},{"version":"0.1.9","url":"https://hex.pm/api/packages/ash_ai/releases/0.1.9","has_docs":true,"inserted_at":"2025-05-27T11:59:10.297262Z"},{"version":"0.1.8","url":"https://hex.pm/api/packages/ash_ai/releases/0.1.8","has_docs":true,"inserted_at":"2025-05-27T06:02:19.402198Z"},{"version":"0.1.7","url":"https://hex.pm/api/packages/ash_ai/releases/0.1.7","has_docs":true,"inserted_at":"2025-05-21T17:47:01.370208Z"},{"version":"0.1.6","url":"https://hex.pm/api/packages/ash_ai/releases/0.1.6","has_docs":true,"inserted_at":"2025-05-21T12:14:41.291925Z"},{"version":"0.1.5","url":"https://hex.pm/api/packages/ash_ai/releases/0.1.5","has_docs":true,"inserted_at":"2025-05-21T10:23:18.665226Z"},{"version":"0.1.4","url":"https://hex.pm/api/packages/ash_ai/releases/0.1.4","has_docs":true,"inserted_at":"2025-05-20T22:09:52.761621Z"},{"version":"0.1.3","url":"https://hex.pm/api/packages/ash_ai/releases/0.1.3","has_docs":true,"inserted_at":"2025-05-20T19:33:31.618115Z"},{"version":"0.1.1","url":"https://hex.pm/api/packages/ash_ai/releases/0.1.1","has_docs":true,"inserted_at":"2025-05-14T17:05:37.991819Z"},{"version":"0.1.0","url":"https://hex.pm/api/packages/ash_ai/releases/0.1.0","has_docs":true,"inserted_at":"2025-05-14T05:33:27.026321Z"}],"html_url":"https://hex.pm/packages/ash_ai","latest_version":"1.0.0","downloads":{"all":220825,"day":1278,"recent":88622,"week":8030},"security_advisories":[{"id":"EEF-CVE-2026-75760","aliases":["CVE-2026-75760","GHSA-p5cr-mmmf-6w39"],"references":[{"type":"ADVISORY","url":"https://github.com/ash-project/ash_ai/security/advisories/GHSA-p5cr-mmmf-6w39"},{"type":"PACKAGE","url":"https://hex.pm/packages/ash_ai"},{"type":"FIX","url":"https://github.com/ash-project/ash_ai/commit/088a2562e16d65f36cec178070de683636479f58"},{"type":"WEB","url":"https://cna.erlef.org/cves/CVE-2026-75760.html"}],"summary":"AshAi vectorize change leaks raw embedding-provider errors, including credentials, in a user-facing error","api_url":"https://api.osv.dev/v1/vulns/EEF-CVE-2026-75760","published_at":"2026-08-31T01:09:59Z","html_url":"https://osv.dev/vulnerability/EEF-CVE-2026-75760","cvss_score":7.1,"cvss_rating":"high","cvss_vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N","modified_at":"2026-08-31T01:25:37Z","withdrawn_at":null,"affected":[">= 0.1.0 and < 1.0.0"]},{"id":"EEF-CVE-2026-82580","aliases":["CVE-2026-82580","GHSA-5747-6mpw-6m9c"],"references":[{"type":"PACKAGE","url":"https://hex.pm/packages/ash_ai"},{"type":"WEB","url":"https://cna.erlef.org/cves/CVE-2026-82580.html"},{"type":"FIX","url":"https://github.com/ash-project/ash_ai/commit/c68dfbdb220426dc015b58379e95bde8e9f0995a"},{"type":"ADVISORY","url":"https://github.com/ash-project/ash_ai/security/advisories/GHSA-5747-6mpw-6m9c"}],"summary":"AshAi echoes raw tool exception messages into the conversation, disclosing internal details","api_url":"https://api.osv.dev/v1/vulns/EEF-CVE-2026-82580","published_at":"2026-08-31T01:09:00Z","html_url":"https://osv.dev/vulnerability/EEF-CVE-2026-82580","cvss_score":5.3,"cvss_rating":"medium","cvss_vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N","modified_at":"2026-08-31T01:25:37Z","withdrawn_at":null,"affected":[">= 0.6.0 and < 1.0.0"]},{"id":"EEF-CVE-2026-82579","aliases":["CVE-2026-82579","GHSA-rcx7-x2w5-mmc2"],"references":[{"type":"ADVISORY","url":"https://github.com/ash-project/ash_ai/security/advisories/GHSA-rcx7-x2w5-mmc2"},{"type":"PACKAGE","url":"https://hex.pm/packages/ash_ai"},{"type":"FIX","url":"https://github.com/ash-project/ash_ai/commit/53325fdab90afab628c6a53232ef2a9001580bd9"},{"type":"WEB","url":"https://cna.erlef.org/cves/CVE-2026-82579.html"}],"summary":"AshAi tool loop never terminates when all tool calls are filtered out, enabling denial of service","api_url":"https://api.osv.dev/v1/vulns/EEF-CVE-2026-82579","published_at":"2026-08-31T01:07:49Z","html_url":"https://osv.dev/vulnerability/EEF-CVE-2026-82579","cvss_score":6.0,"cvss_rating":"medium","cvss_vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","modified_at":"2026-08-31T01:25:38Z","withdrawn_at":null,"affected":[">= 0.6.0 and < 1.0.0"]},{"id":"EEF-CVE-2026-82564","aliases":["CVE-2026-82564","GHSA-jg86-xh36-h5xc"],"references":[{"type":"PACKAGE","url":"https://hex.pm/packages/ash_ai"},{"type":"ADVISORY","url":"https://github.com/ash-project/ash_ai/security/advisories/GHSA-jg86-xh36-h5xc"},{"type":"WEB","url":"https://cna.erlef.org/cves/CVE-2026-82564.html"},{"type":"FIX","url":"https://github.com/ash-project/ash_ai/commit/87f616d5bfbf7af43346f0701ae17f853789a602"}],"summary":"Identity tool filter in AshAi accepts operator maps, allowing update or destroy of unidentified records","api_url":"https://api.osv.dev/v1/vulns/EEF-CVE-2026-82564","published_at":"2026-08-31T01:06:00Z","html_url":"https://osv.dev/vulnerability/EEF-CVE-2026-82564","cvss_score":7.1,"cvss_rating":"high","cvss_vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N","modified_at":"2026-09-01T17:30:04Z","withdrawn_at":null,"affected":[">= 0.6.0 and < 1.0.0"]},{"id":"EEF-CVE-2026-81315","aliases":["CVE-2026-81315","GHSA-c92r-f3rr-q49h"],"references":[{"type":"ADVISORY","url":"https://github.com/ash-project/ash_ai/security/advisories/GHSA-c92r-f3rr-q49h"},{"type":"PACKAGE","url":"https://hex.pm/packages/ash_ai"},{"type":"FIX","url":"https://github.com/ash-project/ash_ai/commit/28af68d73134df0b8fb3aa6ab03e8fd795b07c21"},{"type":"WEB","url":"https://cna.erlef.org/cves/CVE-2026-81315.html"}],"summary":"MCP DNS-rebinding origin check in AshAi is bypassed by a spoofed X-Forwarded-Proto header","api_url":"https://api.osv.dev/v1/vulns/EEF-CVE-2026-81315","published_at":"2026-08-31T00:57:55Z","html_url":"https://osv.dev/vulnerability/EEF-CVE-2026-81315","cvss_score":7.4,"cvss_rating":"high","cvss_vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","modified_at":"2026-08-31T01:10:34Z","withdrawn_at":null,"affected":[">= 0.8.0 and < 1.0.0"]},{"id":"EEF-CVE-2026-77956","aliases":["CVE-2026-77956","GHSA-2g59-hg7m-qc83"],"references":[{"type":"WEB","url":"https://cna.erlef.org/cves/CVE-2026-77956.html"},{"type":"PACKAGE","url":"https://hex.pm/packages/ash_ai"},{"type":"FIX","url":"https://github.com/ash-project/ash_ai/commit/e9948254b5659c1143b73dc2f59f457931e64514"},{"type":"ADVISORY","url":"https://github.com/ash-project/ash_ai/security/advisories/GHSA-2g59-hg7m-qc83"}],"summary":"EEx template evaluation of prompt content in AshAi enables remote code execution","api_url":"https://api.osv.dev/v1/vulns/EEF-CVE-2026-77956","published_at":"2026-08-31T00:56:26Z","html_url":"https://osv.dev/vulnerability/EEF-CVE-2026-77956","cvss_score":8.9,"cvss_rating":"high","cvss_vector":"CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H","modified_at":"2026-08-31T15:15:03Z","withdrawn_at":null,"affected":[">= 0.1.0 and < 1.0.0"]}],"docs_html_url":"https://ash-ai.hexdocs.pm/","retirements":{},"configs":{"erlang.mk":"dep_ash_ai = hex 1.0.0","mix.exs":"{:ash_ai, \"~> 1.0\"}","rebar.config":"{ash_ai, \"1.0.0\"}"},"latest_stable_version":"1.0.0"}