Packages

ash_ai

1.0.0
1.0.0 0.8.2 0.8.1 0.8.0 0.7.3 0.7.2 0.7.1 0.7.0 0.6.1 0.6.0 0.5.0 0.4.0 0.3.0 0.2.14 0.2.13 0.2.12 0.2.11 0.2.10 0.2.9 0.2.8 0.2.7 0.2.6 0.2.5 0.2.4 0.2.3 0.2.2 0.2.1 0.2.0 0.1.11 0.1.10 0.1.9 0.1.8 0.1.7 0.1.6 0.1.5 0.1.4 0.1.3 0.1.1 0.1.0

Integrated LLM features for your Ash application.

HexDocs Report package

Current section

6 Advisories

Jump to
Readme
39 Versions
11 Dependencies
2 Dependants
6 Advisories
Files
Activity
EEF-CVE-2026-75760 CVE-2026-75760 GHSA-p5cr-mmmf-6w39

AshAi vectorize change leaks raw embedding-provider errors, including credentials, in a user-facing error

August 31, 2026
CVSS
?
7.1 / 10.0 High
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

Affected Versions

>= 0.1.0 and < 1.0.0
EEF-CVE-2026-82580 CVE-2026-82580 GHSA-5747-6mpw-6m9c

AshAi echoes raw tool exception messages into the conversation, disclosing internal details

August 31, 2026
CVSS
?
5.3 / 10.0 Medium
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

Affected Versions

>= 0.6.0 and < 1.0.0
EEF-CVE-2026-82579 CVE-2026-82579 GHSA-rcx7-x2w5-mmc2

AshAi tool loop never terminates when all tool calls are filtered out, enabling denial of service

August 31, 2026
CVSS
?
6.0 / 10.0 Medium
CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

Affected Versions

>= 0.6.0 and < 1.0.0
EEF-CVE-2026-82564 CVE-2026-82564 GHSA-jg86-xh36-h5xc

Identity tool filter in AshAi accepts operator maps, allowing update or destroy of unidentified records

August 31, 2026
CVSS
?
7.1 / 10.0 High
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N

Affected Versions

>= 0.6.0 and < 1.0.0
EEF-CVE-2026-81315 CVE-2026-81315 GHSA-c92r-f3rr-q49h

MCP DNS-rebinding origin check in AshAi is bypassed by a spoofed X-Forwarded-Proto header

August 31, 2026
CVSS
?
7.4 / 10.0 High
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N

Affected Versions

>= 0.8.0 and < 1.0.0
EEF-CVE-2026-77956 CVE-2026-77956 GHSA-2g59-hg7m-qc83

EEx template evaluation of prompt content in AshAi enables remote code execution

August 31, 2026
CVSS
?
8.9 / 10.0 High
CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

Affected Versions

>= 0.1.0 and < 1.0.0

Checksum

Dependency Config

mix.exs

rebar.config

Gleam

erlang.mk

Package Details

Downloads Last 30 days, all versions
0 500 1000 1500 2000

this version

0

yesterday

588

last 7 days

7 303

all time

216 025

Last Updated

Aug 30, 2026

License

MIT

Build Tools

mix

Publisher

ash-project ash-project

Links

Owners