ash-project ash_lua vulnerabilities

2 published CVEs name ash-project ash_lua among the affected products.

All 2 in the list Atom feed of new CVEs

Published CVEs: 2
Last 12 months: 2
Critical: 0
Known exploited: 0

Critical 0High 1Medium 1Low 0Not scored 0

Newest CVEs

CVE-2026-78216
AshLua eval read operations can read field-policy-protected fields via aggregates
ash-project · ash_lua
Medium6.0
CVE-2026-82586
AshLua read operation aggregate bypasses the exposed-field allow-list, exposing private attributes
ash-project · ash_lua
High8.2

Most common weaknesses