Authorization bypass when bypass policy condition evaluates to true

Bypass and runtime policies that can never pass may be incorrectly applied in filter authorization

Filtering an :atom attribute with unsafe_to_atom? can exhaust the BEAM atom table in Ash

An upsert on the primary key in Ash ignores attribute multitenancy, so one tenant can read, overwrite and take over another tenant's records

Ash Framework: Ash.Type.Module.cast_input/2 atom exhaustion via unchecked Module.concat allows BEAM VM crash

Filter expression injection via forged keyset pagination cursor in Ash

Before action hooks may execute in certain scenarios despite a request being forbidden