Ash-Project Ash Lua
2 CVEs affecting Ash-Project Ash Lua. Latest disclosed: 2026-09-08. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-78216 | | 2026-09-08 | AshLua exposes Ash read actions to Lua scripts run through an eval action. A read call accepts an operation (list, min, max, first, sum, avg) that builds an ad… | |
CVE-2026-82586 | | 2026-09-07 | Improper Protection of Alternate Path vulnerability in ash-project ash_lua allows a user-supplied Lua script to read attributes that are not on the exposed-fie… |