.nav-burger { display: none !important; } @media (max-width: 1180px) { /* Match Tailwind's base layer: its important [hidden] reset otherwise wins. */ @layer base { .nav-overlay[hidden] { display: flex !important; } } .nav-overlay[hidden] { position: static; padding: 2rem 1rem; } }

ash_graphql 1.11.0 vulnerabilities

6 advisories known · ash_graphql@1.11.0 · none affect this release · Dependencies not checked

SEVERITYADVISORYPUBLISHED

Does not affect 1.11.0

SEVERITYADVISORYPUBLISHED

UnknownIncomplete redaction re-attaches the original error path in AshGraphql, leaking internal field namesEEF-CVE-2026-78693CVE-2026-78693GHSA-ppr2-g9h8-w7qpAffected >=1.9.0 <1.11.0Fixed in 1.11.0OSV source ↗2 months ago

UnknownCross-tenant subscription disclosure in AshGraphql authorizes notifications in memory without a tenant-scoped readEEF-CVE-2026-80223CVE-2026-80223GHSA-rcqc-59g2-gjg2Affected >=1.4.0 <1.11.0Fixed in 1.11.0OSV source ↗2 months ago

UnknownQuery-complexity limit bypass via first/last pagination arguments in AshGraphql enables denial of serviceEEF-CVE-2026-81636CVE-2026-81636GHSA-mwc4-r9fc-h6mgAffected >=0.16.23 <1.11.0Fixed in 1.11.0OSV source ↗2 months ago

UnknownUnhandled KeyError in AshGraphql relay node resolution crashes queries via an unknown type segmentEEF-CVE-2026-81633CVE-2026-81633GHSA-mrgv-g7gf-r96hAffected >=0.27.0 <1.11.0Fixed in 1.11.0OSV source ↗2 months ago

UnknownBroken access control in AshGraphql subscription batcher applies authorization suppression to only the first notificationEEF-CVE-2026-81643CVE-2026-81643GHSA-j684-hch4-q888Affected >=1.4.0 <1.11.0Fixed in 1.11.0OSV source ↗2 months ago

UnknownRe-entrant synchronous publish in AshGraphql subscription batcher delivers one subscriber's records to another's topicEEF-CVE-2026-82367CVE-2026-82367GHSA-wm4m-cjmc-5v8cAffected >=1.4.0 <1.11.0Fixed in 1.11.0OSV source ↗2 months ago