THREAT OPS › Threat News › [NVD] CVE-2026-80227 — Incorrect Comparison vulnerability in ash-project ash_sql allows a user to pad a string field with tab, newline, carriage-return, or form-feed characters and pass a trimmed uniqueness or equality check in the database that the same expression would fail in memory (or the reverse)
[NVD] CVE-2026-80227 — Incorrect Comparison vulnerability in ash-project ash_sql allows a user to pad a string field with tab, newline, carriage-return, or form-feed characters and pass a trimmed uniqueness or equality check in the database that the same expression would fail in memory (or the reverse)
CVE-2026-80227 CVSS: None Published: 2026-08-30T12:17:18.710
Incorrect Comparison vulnerability in ash-project ash_sql allows a user to pad a string field with tab, newline, carriage-return, or form-feed characters and pass a trimmed uniqueness or equality check in the database that the same expression would fail in memory (or the reverse).
string_trim/1 compiles to REGEXP_REPLACE patterns buil
Indicators of compromise
- CVE-2026-80227cve
Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-80227