Zach Daniel / Ash Project

rename_tenant returns :ok on a failed rename, enabling cross-tenant access in AshPostgres

Distinct-query aggregate drops the tenant schema prefix, leaking across tenants in AshSql

Same-named aggregates with differing filters are conflated in AshSql

SQL string_trim removes only spaces, diverging from in-memory trimming in AshSql

Unescaped backslash allows LIKE wildcard injection in AshSql string search

Unbounded handle_error recursion enables denial of service in AshOban triggers

Job argument injection via :args overrides primary_key and tenant in AshOban

exists/2 predicate silently dropped on limited relationships with a parent() filter in AshSql

JSON path injection via unescaped get_path segments in AshSqlite

Sensitive fields nested in embedded values are not redacted in AshPaperTrail versions