Ash-Project Ash Lua

2 known vulnerabilities in Ash-Project Ash Lua, with patch priority, exploit likelihood and the news covering them.

Latest vulnerabilities

  • CVE-2026-78216 CVSS 6.0 medium AshLua exposes Ash read actions to Lua scripts run through an eval action. A read call accepts an operation (list, min, max, first, sum…
  • CVE-2026-82586 CVSS 8.2 high Improper Protection of Alternate Path vulnerability in ash-project ash_lua allows a user-supplied Lua script to read attributes that are…