Ash-project Ash Lua vulnerabilities

• ash-project ash lua AshLua eval read operations can read field-policy-protected fields via aggregates CVE-2026-78216 Fix available 6.0 MediumSeptember 8, 2026
• ash-project ash lua AshLua read operation aggregate bypasses the exposed-field allow-list, exposing private attributes CVE-2026-82586 Fix available 8.2 HighSeptember 7, 2026