{"id":143603956,"number":"0.2.87","published_at":"2025-07-22T15:07:13.118Z","licenses":null,"integrity":"sha256-f82d6bf78f08bd9040af3adc28676965421598c88866074d8b1ccca65978d774","status":null,"download_url":"https://repo.hex.pm/tarballs/ash_sql-0.2.87.tar","registry_url":"https://hex.pm/packages/ash_sql/0.2.87","documentation_url":"http://hexdocs.pm/ash_sql/0.2.87","install_command":"mix hex.package fetch ash_sql 0.2.87","immutable":null,"metadata":{"downloads":765},"created_at":"2025-07-24T03:20:30.745Z","updated_at":"2025-07-24T03:20:30.745Z","purl":"pkg:hex/ash_sql@0.2.87","related_tag":{"name":"v0.2.87","sha":"2c0cc6197d41bc11134acc7bac62fea665e0eef1","kind":"tag","published_at":"2025-07-22T15:06:52.000Z","download_url":"https://codeload.github.com/ash-project/ash_sql/tar.gz/v0.2.87","html_url":"https://github.com/ash-project/ash_sql/releases/tag/v0.2.87","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/ash-project/ash_sql@v0.2.87","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/ash-project%2Fash_sql/tags/v0.2.87","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/ash-project%2Fash_sql/tags/v0.2.87/manifests"},"latest":false,"version_url":"https://packages.ecosyste.ms/api/v1/registries/hex.pm/packages/ash_sql/versions/0.2.87","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/hex.pm/packages/ash_sql/versions/0.2.87/codemeta","dependencies":[{"id":1665214727,"ecosystem":"hex","package_name":"ash","requirements":"~\u003e 3.0 and \u003e= 3.5.25","kind":"runtime","optional":false},{"id":1665214728,"ecosystem":"hex","package_name":"ecto","requirements":"~\u003e 3.9","kind":"runtime","optional":false},{"id":1665214729,"ecosystem":"hex","package_name":"ecto_sql","requirements":"~\u003e 3.9","kind":"runtime","optional":false}],"advisories":[{"uuid":"EEF-CVE-2026-81316","identifiers":["EEF-CVE-2026-81316","GHSA-v7pf-wjxc-7j5m","CVE-2026-81316"],"url":"https://github.com/ash-project/ash_sql/security/advisories/GHSA-v7pf-wjxc-7j5m","title":"Same-named aggregates with differing filters are conflated in AshSql","severity":"LOW","affected":true,"fixed":false,"fixed_versions":["0.7.1"]},{"uuid":"EEF-CVE-2026-81318","identifiers":["EEF-CVE-2026-81318","GHSA-ww8j-58rc-f8h3","CVE-2026-81318"],"url":"https://github.com/ash-project/ash_sql/security/advisories/GHSA-ww8j-58rc-f8h3","title":"Distinct-query aggregate drops the tenant schema prefix, leaking across tenants in AshSql","severity":"LOW","affected":true,"fixed":false,"fixed_versions":["0.7.1"]},{"uuid":"EEF-CVE-2026-78691","identifiers":["EEF-CVE-2026-78691","GHSA-5jgp-7mhc-6qqh","CVE-2026-78691"],"url":"https://github.com/ash-project/ash_sql/security/advisories/GHSA-5jgp-7mhc-6qqh","title":"Unescaped backslash allows LIKE wildcard injection in AshSql string search","severity":"LOW","affected":true,"fixed":false,"fixed_versions":["0.7.1"]},{"uuid":"EEF-CVE-2026-80227","identifiers":["EEF-CVE-2026-80227","GHSA-76wx-w7ww-5xfq","CVE-2026-80227"],"url":"https://github.com/ash-project/ash_sql/security/advisories/GHSA-76wx-w7ww-5xfq","title":"SQL string_trim removes only spaces, diverging from in-memory trimming in AshSql","severity":"LOW","affected":true,"fixed":false,"fixed_versions":["0.7.1"]}],"package_url":"https://packages.ecosyste.ms/api/v1/registries/hex.pm/packages/ash_sql"}