Will Townsend
4 credited records · 4 in the last 12 months · 0 in CISA KEV
Names are free text from CNA records; the same person may appear under different spellings. Write to us for corrections.
Get told when this name is credited on a new CVE
If it's you, this is the easiest way to track your records: we'll notify you in the daily email digest when a new one is published.
Credited records
Researchers| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
30Monitor | CVE-2026-96581No exploit | An upsert on the primary key in Ash ignores attribute multitenancy, so one tenant can read, overwrite and take over another tenant's recordsash-project · ash · CWE-639 | High7.6 | — | 0.2% | Oct 26, 2026 |
24Monitor | CVE-2026-115635No exploit | AshPostgres returns another tenant's record for a skipped upsert when return_skipped_upsert? is setash-project · ash_postgres · CWE-863 | Medium6.0 | — | 0.2% | Oct 25, 2026 |
24Monitor | CVE-2026-115627No exploit | AshPostgres ignores attribute multitenancy on the join resource when loading many_to_many and through relationships, returning records related through other tenash-project · ash_postgres · CWE-863 | Medium6.0 | — | 0.2% | Oct 25, 2026 |
24Monitor | CVE-2026-114214No exploit | Loading a through relationship with a limit of 1 in Ash ignores the through path and returns unrelated destination recordsash-project · ash · CWE-863 | Medium6.0 | — | 0.2% | Oct 25, 2026 |
- CVE-2026-9658130Monitor
An upsert on the primary key in Ash ignores attribute multitenancy, so one tenant can read, overwrite and take over another tenant's records
HighCVSS 7.6No exploitEPSS 0%ash-project · ashOct 26, 2026
- CVE-2026-11563524Monitor
AshPostgres returns another tenant's record for a skipped upsert when return_skipped_upsert? is set
MediumCVSS 6.0No exploitEPSS 0%ash-project · ash_postgresOct 25, 2026
- CVE-2026-11562724Monitor
AshPostgres ignores attribute multitenancy on the join resource when loading many_to_many and through relationships, returning records related through other ten
MediumCVSS 6.0No exploitEPSS 0%ash-project · ash_postgresOct 25, 2026
- CVE-2026-11421424Monitor
Loading a through relationship with a limit of 1 in Ash ignores the through path and returns unrelated destination records
MediumCVSS 6.0No exploitEPSS 0%ash-project · ashOct 25, 2026