CVE-2026-114214

An incorrect authorization vulnerability exists in ash: from version 3.24.0 before 3.37.1 . The flaw occurs in the lateral_join?/4 function within lib/ash/actions/read/relationships.ex. When loading a has_many relationship with a through: declaration and a limit of 1, or an unsorted has_one throu...