THREAT OPS › Threat News › [NVD] CVE-2026-82752 — Improper Validation of Specified Quantity in Input vulnerability in ash-project ash allows an attacker to store a value of arbitrary size in an attribute whose length constraint should bound it.
Ash measures string length with Elixir's String.length/1, which counts Unicode graph
[NVD] CVE-2026-82752 — Improper Validation of Specified Quantity in Input vulnerability in ash-project ash allows an attacker to store a value of arbitrary size in an attribute whose length constraint should bound it. Ash measures string length with Elixir's String.length/1, which counts Unicode graph
CVE-2026-82752 CVSS: None Published: 2026-09-05T18:17:29.170
Improper Validation of Specified Quantity in Input vulnerability in ash-project ash allows an attacker to store a value of arbitrary size in an attribute whose length constraint should bound it.
Ash measures string length with Elixir's String.length/1, which counts Unicode graphemes, in the max_length and min_length constraints of Ash
Indicators of compromise
- CVE-2026-82752cve
Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-82752