Deserialization in Ash-project Ash

CVE-2026-69659

Uncontrolled Resource Consumption vulnerability in ash-project ash allows an attacker to exhaust the memory of the node via a crafted keyset pagination cursor. Read actions with keyset pagination deserialize the client-supplied page[:afte…

Vulnerability class: Insecure Deserialization

Affected products

  • Ash-project Ash — versions 1.17.0, f8fadc67e67c955bb68b3a8d642be13e2b7e8ca9

Weakness classification (CWE)

References