CVE-2026-115627

The ash_postgres component (versions 0.38.0 before 2.15.2 ) is vulnerable to an Incorrect Authorization issue (CWE-863). When loading many_to_many or through relationships using a lateral join (such as with sorting or per-record limits), the AshPostgres.DataLayer fails to execute the resource's r...