Uncontrolled Resource Consumption Vulnerability in Ash Project by Ash

CVE-2026-82735

What is CVE-2026-82735?

The vulnerability in the Ash Project arises from improper handling of regular expression evaluations without adequate constraints. An attacker can leverage this flaw by submitting an input that avoids length limits yet still triggers complex regex processing, leading to excessive CPU consumption and potential Denial of Service (DoS). The issue has been addressed in the recent updates, ensuring regex patterns are only evaluated when input meets length constraints, thus providing improved security and system integrity.

References