ash_lua vulnerabilities (Hex)

2 vulnerabilities.

• ash_lua Hex AshLua eval read operations can read field-policy-protected fields via aggregates CVE-2026-78216 Fix available 6.0 MediumSeptember 8, 2026
• ash_lua Hex AshLua read operation aggregate bypasses the exposed-field allow-list, exposing private attributes CVE-2026-82586 Fix available 8.2 HighSeptember 7, 2026