ash_lua vulnerabilities

1 known vulnerability in ash_lua from Ash-project. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.2 High severity

  ash_lua: Improper Protection of Alternate Path

  CVE-2026-82586Sep 7, 2026Ash-project

  Improper Protection of Alternate Path vulnerability in ash-project ash_lua allows a user-supplied Lua script to read attributes that are not on the exposed-field allow-list. AshLua exposes Ash resources to Lua scripts, gated by a manifest declaring which field