AS
Product
ash_phoenix
by ash-project · last CVE Aug 31, 2026
4
CVEs
0
On KEV
7.6
Max CVSS
0
New 30D
Severity mix
Critical 0High 1Medium 1Low 2
Watch

Add ash_phoenix to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-82726
6.3
1%
Aug 31
AshPhoenix get_subdomain maps a crafted or differently-cased Host header to an arbitrary tenant
Affected: 2.1.26 before 2.3.25; 9a5ea4d377bc263de321d79574872a3dfc4fb541 before 8306f29e77526840c89f3cd244996ce7c0fa2cda
Showing 1