.nav-burger { display: none !important; } @media (max-width: 1180px) { /* Match Tailwind's base layer: its important [hidden] reset otherwise wins. */ @layer base { .nav-overlay[hidden] { display: flex !important; } } .nav-overlay[hidden] { position: static; padding: 2rem 1rem; } }

ash_phoenix 2.3.25 vulnerabilities

4 advisories known · ash_phoenix@2.3.25 · none affect this release · Dependencies not checked

SEVERITYADVISORYPUBLISHED

Does not affect 2.3.25

SEVERITYADVISORYPUBLISHED

UnknownAshPhoenix FilterForm allows filtering across non-public relationships, disclosing private related dataEEF-CVE-2026-82725CVE-2026-82725GHSA-7xhg-xphm-f458Affected >=0.6.0-rc.1 <2.3.25Fixed in 2.3.25OSV source ↗2 months ago

UnknownBroken access control in AshPhoenix SubdomainHook via a nil tenant in handle_subdomainEEF-CVE-2026-82724CVE-2026-82724GHSA-39c8-xcwr-gqffAffected >=2.1.26 <2.3.25Fixed in 2.3.25OSV source ↗2 months ago

UnknownAshPhoenix get_subdomain maps a crafted or differently-cased Host header to an arbitrary tenantEEF-CVE-2026-82726CVE-2026-82726GHSA-rpf8-q9jh-qxrrAffected >=2.1.26 <2.3.25Fixed in 2.3.25OSV source ↗2 months ago

UnknownAshPhoenix Form.Auto leaks submitted params in an unknown _union_type error messageEEF-CVE-2026-82727CVE-2026-82727GHSA-5xf4-hgcq-xw7vAffected >=1.2.17 <2.3.25Fixed in 2.3.25OSV source ↗2 months ago