1 matches found
CVE-2026-82747: Incorrect Authorization
Incorrect Authorization vulnerability in ash-project ash returns records that a runtime read policy denies to any actor. When a resource has an accesstype :runtime read policy a check evaluated per record rather than compiled to a filter, Ash.Policy.Authorizer decides each record in checkresult/1...
5.9CVSS5.8AI score0.00171EPSS
SaveExploits0References2
20