Ash-Project Ash Oban vulnerabilities

2 CVEs affecting Ash-Project Ash Oban, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-78228, published 2026-08-30.

More from Ash-Project.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2026-78038, published 2026-08-30. Medium severity, CVSS 5.9. EPSS: 0.4% chance of exploitation in the next 30 days. Improperly Controlled Modification of Dynamically-Determined Object Attributes vulnerability in ash-project ash_oban allows a user whose input reaches the :args option of AshOban.build_trigger/3 to…
• CVE-2026-78228, published 2026-08-30. Medium severity, CVSS 5.9. EPSS: 0.2% chance of exploitation in the next 30 days. Uncontrolled Recursion vulnerability in ash-project ash_oban allows a user who can drive a trigger's on_error action to fail on the final attempt to exhaust worker CPU and memory, denying…