{"id":129031949,"number":"0.2.44","published_at":"2025-01-06T22:06:09.562Z","licenses":null,"integrity":"sha256-a4a178da467c57b443d7525632a686712c0f561b518ad870d14779b550d9e855","status":null,"download_url":"https://repo.hex.pm/tarballs/ash_sql-0.2.44.tar","registry_url":"https://hex.pm/packages/ash_sql/0.2.44","documentation_url":"http://hexdocs.pm/ash_sql/0.2.44","install_command":"mix hex.package fetch ash_sql 0.2.44","immutable":null,"metadata":{"downloads":956},"created_at":"2025-01-09T15:24:09.307Z","updated_at":"2025-01-13T19:29:39.282Z","purl":"pkg:hex/ash_sql@0.2.44","related_tag":{"name":"v0.2.44","sha":"6577b94f777d305d9f1fe5b84fa61ef86f8299ff","kind":"tag","published_at":"2025-01-06T22:05:58.000Z","download_url":"https://codeload.github.com/ash-project/ash_sql/tar.gz/v0.2.44","html_url":"https://github.com/ash-project/ash_sql/releases/tag/v0.2.44","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/ash-project/ash_sql@v0.2.44","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/ash-project%2Fash_sql/tags/v0.2.44","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/ash-project%2Fash_sql/tags/v0.2.44/manifests"},"latest":false,"version_url":"https://packages.ecosyste.ms/api/v1/registries/hex.pm/packages/ash_sql/versions/0.2.44","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/hex.pm/packages/ash_sql/versions/0.2.44/codemeta","dependencies":[{"id":1466720265,"ecosystem":"hex","package_name":"ash","requirements":"~\u003e 3.0 and \u003e= 3.1.7","kind":"runtime","optional":false},{"id":1466720266,"ecosystem":"hex","package_name":"ecto","requirements":"~\u003e 3.9","kind":"runtime","optional":false},{"id":1466720267,"ecosystem":"hex","package_name":"ecto_sql","requirements":"~\u003e 3.9","kind":"runtime","optional":false}],"advisories":[{"uuid":"EEF-CVE-2026-81316","identifiers":["EEF-CVE-2026-81316","GHSA-v7pf-wjxc-7j5m","CVE-2026-81316"],"url":"https://github.com/ash-project/ash_sql/security/advisories/GHSA-v7pf-wjxc-7j5m","title":"Same-named aggregates with differing filters are conflated in AshSql","severity":"LOW","affected":true,"fixed":false,"fixed_versions":["0.7.1"]},{"uuid":"EEF-CVE-2026-81318","identifiers":["EEF-CVE-2026-81318","GHSA-ww8j-58rc-f8h3","CVE-2026-81318"],"url":"https://github.com/ash-project/ash_sql/security/advisories/GHSA-ww8j-58rc-f8h3","title":"Distinct-query aggregate drops the tenant schema prefix, leaking across tenants in AshSql","severity":"LOW","affected":true,"fixed":false,"fixed_versions":["0.7.1"]},{"uuid":"EEF-CVE-2026-78691","identifiers":["EEF-CVE-2026-78691","GHSA-5jgp-7mhc-6qqh","CVE-2026-78691"],"url":"https://github.com/ash-project/ash_sql/security/advisories/GHSA-5jgp-7mhc-6qqh","title":"Unescaped backslash allows LIKE wildcard injection in AshSql string search","severity":"LOW","affected":true,"fixed":false,"fixed_versions":["0.7.1"]},{"uuid":"EEF-CVE-2026-80227","identifiers":["EEF-CVE-2026-80227","GHSA-76wx-w7ww-5xfq","CVE-2026-80227"],"url":"https://github.com/ash-project/ash_sql/security/advisories/GHSA-76wx-w7ww-5xfq","title":"SQL string_trim removes only spaces, diverging from in-memory trimming in AshSql","severity":"LOW","affected":true,"fixed":false,"fixed_versions":["0.7.1"]}],"package_url":"https://packages.ecosyste.ms/api/v1/registries/hex.pm/packages/ash_sql"}