CVE-2026-78691 | ash-project ash_sql up to 0.7.0 Escape Helpers contains/string_starts_with/string_ends_with neutralization

August 30, 2026 Yanac

A vulnerability labeled as critical has been found in ash-project ash_sql up to 0.7.0. Affected by this issue is the function contains/string_starts_with/string_ends_with of the component Escape Helpers. The manipulation results in improper neutralization.

This vulnerability is cataloged as CVE-2026-78691. The attack may be launched remotely. There is no exploit available.

The affected component should be upgraded.VulDB Recent EntriesRead More