ash_lua (Hex)
Advisories
2
Latest version
—
License
—
OpenSSF Scorecard
—
How to fix
Upgrading to 0.2.2 or later clears every advisory below that has a fix.
Upgrade commands
mix
{:ash_lua, "~> 0.2.2"} # then: mix deps.update ash_luaKnown vulnerabilities
| Advisory | Severity | Affected | Fixed in |
|---|---|---|---|
| EEF-CVE-2026-78216 AshLua eval read operations can read field-policy-protected fields via aggregates |
Not rated yet EPSS 0.43% |
>= 0.1.0, < 0.2.2 | 0.2.2 |
| EEF-CVE-2026-82586 AshLua read operation aggregate bypasses the exposed-field allow-list, exposing private attributes |
Not rated yet EPSS 0.52% |
>= 0.1.0, < 0.2.1 | 0.2.1 |
MergeHarbor checks every repository's dependencies against this database, ranks what matters by exploitability and reachability, routes it to the owning team and opens the fix pull request.
Check your repos with MergeHarbor