Ash-Project Ash Postgres vulnerabilities

2 CVEs affecting Ash-Project Ash Postgres, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-78699, published 2026-08-30.

More from Ash-Project.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2024-49756, published 2024-10-23. Medium severity, CVSS 5.3. EPSS: 0.5% chance of exploitation in the next 30 days. AshPostgres is the PostgreSQL data layer for Ash Framework. Starting in version 2.0.0 and prior to version 2.4.10, in certain very specific situations, it was possible for the policies of an update…
• CVE-2026-78699, published 2026-08-30. High severity, CVSS 7.2. EPSS: 0.2% chance of exploitation in the next 30 days. Unchecked Return Value vulnerability in ash-project ash_postgres allows a user who can drive a tenant rename to a name that collides with an existing tenant's schema to have their tenant record…