Post

Hey folks! We have a CVE up for #AshFramework bypass policies. It's a *highly unlikely edge case*. But, as always, we take security extremely seriously and will always follow proper procedure here. Props to @maennchen.dev for reporting and resolving 🙇

See the CVE here: cna.erlef.org/cves/cve-202...

It’s awesome to see the level of dedication and professionalism how you all (with the umbrella of the ErlEF‘s CNA) are handling all of that. Big hat tip. Wanted to add some snarky joke about „making Elixir more known to the world“ via vulnerabilities and CVEs, but didn’t find the right words 🤪