Improper Input Validation in Ash Project Affecting Array Constraints

CVE-2026-82740

What is CVE-2026-82740?

An input validation flaw exists in the Ash Framework, where outer array constraints are not enforced on a doubly-nested array attribute. This oversight allows attackers to submit invalid outer lists, bypassing constraints such as minimum and maximum lengths, leading to potential application integrity issues. The vulnerability has been addressed in versions subsequent to 3.32.1, which now enforce stricter validation rules on outer lists to prevent exploitation.

References