Skip to content
OpenAdvisories

Package · Hex

ash_lua

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.0
    CVE-2026-78216

    AshLua eval read operations can read field-policy-protected fields via aggregates

    AshLua exposes Ash read actions to Lua scripts run through an eval action. A read call accepts an operation (list, min, max, first, sum, avg) that builds an ad-hoc Ash.Query.Aggregate over a named field and returns its raw value. Ash field policies redact for…

    ash-project ash_lua ash_lua Hex