{"id":117926581,"number":"2.2.2","published_at":"2024-08-17T16:09:25.343Z","licenses":null,"integrity":"sha256-18c60ce993635464ee0b9861e8c5e21585f1451c3c2b85b400dcd5d3124e7f79","status":null,"download_url":"https://repo.hex.pm/tarballs/ash_postgres-2.2.2.tar","registry_url":"https://hex.pm/packages/ash_postgres/2.2.2","documentation_url":"http://hexdocs.pm/ash_postgres/2.2.2","install_command":"mix hex.package fetch ash_postgres 2.2.2","immutable":null,"metadata":{"downloads":42},"created_at":"2024-08-19T00:04:27.101Z","updated_at":"2024-08-19T00:04:27.101Z","purl":"pkg:hex/ash_postgres@2.2.2","related_tag":{"name":"v2.2.2","sha":"73a070e2feccc0969504c84ae552be5ce39b4e62","kind":"tag","published_at":"2024-08-17T16:09:09.000Z","download_url":"https://codeload.github.com/ash-project/ash_postgres/tar.gz/v2.2.2","html_url":"https://github.com/ash-project/ash_postgres/releases/tag/v2.2.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/ash-project/ash_postgres@v2.2.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/ash-project%2Fash_postgres/tags/v2.2.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/ash-project%2Fash_postgres/tags/v2.2.2/manifests"},"latest":false,"version_url":"https://packages.ecosyste.ms/api/v1/registries/hex.pm/packages/ash_postgres/versions/2.2.2","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/hex.pm/packages/ash_postgres/versions/2.2.2/codemeta","dependencies":[{"id":1312253268,"ecosystem":"hex","package_name":"ash","requirements":"~\u003e 3.3","kind":"runtime","optional":false},{"id":1312253269,"ecosystem":"hex","package_name":"ash_sql","requirements":"~\u003e 0.2 and \u003e= 0.2.30","kind":"runtime","optional":false},{"id":1312253270,"ecosystem":"hex","package_name":"ecto","requirements":"~\u003e 3.12 and \u003e= 3.12.1","kind":"runtime","optional":false},{"id":1312253271,"ecosystem":"hex","package_name":"ecto_sql","requirements":"~\u003e 3.12","kind":"runtime","optional":false},{"id":1312253272,"ecosystem":"hex","package_name":"igniter","requirements":"~\u003e 0.3 and \u003e= 0.3.6","kind":"runtime","optional":false},{"id":1312253273,"ecosystem":"hex","package_name":"jason","requirements":"~\u003e 1.0","kind":"runtime","optional":false},{"id":1312253274,"ecosystem":"hex","package_name":"postgrex","requirements":"\u003e= 0.0.0","kind":"runtime","optional":false}],"advisories":[{"uuid":"EEF-CVE-2026-115627","identifiers":["EEF-CVE-2026-115627","GHSA-gr2r-f49c-9gm2","CVE-2026-115627"],"url":"https://github.com/ash-project/ash/security/advisories/GHSA-gr2r-f49c-9gm2","title":"AshPostgres ignores attribute multitenancy on the join resource when loading many_to_many and through relationships, returning records related through other tenants' rows","severity":"MEDIUM","affected":true,"fixed":false,"fixed_versions":["2.15.2"]},{"uuid":"EEF-CVE-2026-78699","identifiers":["EEF-CVE-2026-78699","GHSA-6fqq-j9c4-5766","CVE-2026-78699"],"url":"https://github.com/ash-project/ash_postgres/security/advisories/GHSA-6fqq-j9c4-5766","title":"rename_tenant returns :ok on a failed rename, enabling cross-tenant access in AshPostgres","severity":"HIGH","affected":true,"fixed":false,"fixed_versions":["2.13.0"]},{"uuid":"GSA_kwCzR0hTQS1oZjU5LTdyd3EtNzg1bc4ABAmD","identifiers":["GHSA-hf59-7rwq-785m","CVE-2024-49756"],"url":"https://github.com/advisories/GHSA-hf59-7rwq-785m","title":"In AshPostgres, empty, atomic, non-bulk actions, policy bypass for side-effects vulnerability.","severity":"MODERATE","affected":true,"fixed":false,"fixed_versions":["2.4.10"]}],"package_url":"https://packages.ecosyste.ms/api/v1/registries/hex.pm/packages/ash_postgres"}