CVE-2026-80223

ash_graphql (Elixir GraphQL binding for the Ash framework) contains a cross-tenant subscription disclosure in its subscription resolver (AshGraphql.Graphql.Resolver). The fast path calls Ash.can/3 with run_queries?: false, evaluating the read policy filter in memory via Ash.Expr.eval/2 without is...