PT-2026-83549

Incorrect Authorization vulnerability in ash-project ash sql allows a caller in a schema-based multitenant application to receive aggregate values computed from another tenant's rows. When an aggregate is computed over a distinct query, AshSql.AggregateQuery.add single aggs/5 rebuilds the outer...