ash-project ash_sql

• CVE-2026-77454 Medium 5.9 exists/2 predicate silently dropped on limited relationships with a parent() filter in AshSql 0.2%
• CVE-2026-81316 Low 2.1 Same-named aggregates with differing filters are conflated in AshSql 0.2%
• CVE-2026-81318 Low 2.1 Distinct-query aggregate drops the tenant schema prefix, leaking across tenants in AshSql 0.2%
• CVE-2026-78691 Low 2.1 Unescaped backslash allows LIKE wildcard injection in AshSql string search 0.2%
• CVE-2026-80227 Low 2.1 SQL string_trim removes only spaces, diverging from in-memory trimming in AshSql 0.4%