Lucene search
+L

1 matches found

OSV
OSV
•added 2026/09/01 4:14 a.m.•16 views

CVE-2026-82747 Ash.Policy.Authorizer returns records denied by a runtime read policy to any actor

Incorrect Authorization vulnerability in ash-project ash returns records that a runtime read policy denies to any actor. When a resource has an accesstype :runtime read policy a check evaluated per record rather than compiled to a filter, Ash.Policy.Authorizer decides each record in checkresult/1...

5.9CVSS5.8AI score0.00171EPSS
SaveExploits0References9
Rows per page
Query Builder