CVE-2026-77956

ash_ai (Elixir library by ash-project) contains a code injection vulnerability in AshAi.Actions.Prompt . Prompt content is evaluated through EEx.eval_string/2, and the documented function-form prompt (fn input, context -> ... end) allows prompt text built from action arguments to be compiled a...