Packages

ash_ai

1.1.0
1.1.0 1.0.3 1.0.2 1.0.1 1.0.0 0.8.2 0.8.1 0.8.0 0.7.3 0.7.2 0.7.1 0.7.0 0.6.1 0.6.0 0.5.0 0.4.0 0.3.0 0.2.14 0.2.13 0.2.12 0.2.11 0.2.10 0.2.9 0.2.8 0.2.7 0.2.6 0.2.5 0.2.4 0.2.3 0.2.2 0.2.1 0.2.0 0.1.11 0.1.10 0.1.9 0.1.8 0.1.7 0.1.6 0.1.5 0.1.4 0.1.3 0.1.1 0.1.0

Integrated LLM features for your Ash application.

HexDocs Report package

Current section

7 Advisories

Jump to
Readme
43 Versions
11 Dependencies
2 Dependants
7 Advisories
Files
Activity
EEF-CVE-2026-78230 CVE-2026-78230 GHSA-v5rw-36x5-r5vx

AshAi aggregate tool can read field-policy-protected fields

September 08, 2026
CVSS
?
6.0 / 10.0 Medium
CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

Affected Versions

>= 0.1.0 and < 1.0.3
EEF-CVE-2026-75760 CVE-2026-75760 GHSA-p5cr-mmmf-6w39

AshAi vectorize change leaks raw embedding-provider errors, including credentials, in a user-facing error

August 31, 2026
CVSS
?
7.1 / 10.0 High
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

Affected Versions

>= 0.1.0 and < 1.0.0
EEF-CVE-2026-82580 CVE-2026-82580 GHSA-5747-6mpw-6m9c

AshAi echoes raw tool exception messages into the conversation, disclosing internal details

August 31, 2026
CVSS
?
5.3 / 10.0 Medium
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

Affected Versions

>= 0.6.0 and < 1.0.0
EEF-CVE-2026-82579 CVE-2026-82579 GHSA-rcx7-x2w5-mmc2

AshAi tool loop never terminates when all tool calls are filtered out, enabling denial of service

August 31, 2026
CVSS
?
6.0 / 10.0 Medium
CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

Affected Versions

>= 0.6.0 and < 1.0.0
EEF-CVE-2026-82564 CVE-2026-82564 GHSA-jg86-xh36-h5xc

Identity tool filter in AshAi accepts operator maps, allowing update or destroy of unidentified records

August 31, 2026
CVSS
?
7.1 / 10.0 High
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N

Affected Versions

>= 0.6.0 and < 1.0.0
EEF-CVE-2026-81315 CVE-2026-81315 GHSA-c92r-f3rr-q49h

MCP DNS-rebinding origin check in AshAi is bypassed by a spoofed X-Forwarded-Proto header

August 31, 2026
CVSS
?
7.4 / 10.0 High
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N

Affected Versions

>= 0.8.0 and < 1.0.0
EEF-CVE-2026-77956 CVE-2026-77956 GHSA-2g59-hg7m-qc83

EEx template evaluation of prompt content in AshAi enables remote code execution

August 31, 2026
CVSS
?
8.9 / 10.0 High
CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

Affected Versions

>= 0.1.0 and < 1.0.0

Checksum

Dependency Config

mix.exs

rebar.config

Gleam

erlang.mk

Package Details

Downloads Last 30 days, all versions
0 500 1000 1500 2000

this version

1 054

yesterday

1 614

last 7 days

8 882

all time

243 763

Last Updated

Sep 18, 2026

License

MIT

Build Tools

mix

Publisher

ash-project ash-project

Links

Owners