Ash Lua
Ash-Project · 2 CVEs
CVE-2026-78216
MEDIUM
AshLua eval read operations can read field-policy-protected fields via aggregates
Sep 8, 2026
CVE-2026-82586
HIGH
AshLua read operation aggregate bypasses the exposed-field allow-list, exposing private attributes
Sep 7, 2026
| CVE ID | Description | Severity | EPSS | Published |
|---|---|---|---|---|
| CVE-2026-78216 | AshLua eval read operations can read field-policy-protected fields via aggregates | MEDIUM | 0.43% | Sep 8, 2026 |
| CVE-2026-82586 | AshLua read operation aggregate bypasses the exposed-field allow-list, exposing private attributes | HIGH | 0.52% | Sep 7, 2026 |
Showing 1 to 2 of 2 CVEs