What’s Vulnerable › Products

lunary-ai/lunary vulnerabilities

70 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 32 published in the last 12 months.

Check whether your lunary-ai/lunary version is affected

Latest lunary-ai/lunary vulnerabilities

• CVE-2024-5386 — Account Hijacking via Password Reset Token Leak in lunary-ai/lunary (CVSS 8.8)
• CVE-2024-4147 — Insufficient Access Control in lunary-ai/lunary (CVSS 6.5)
• CVE-2025-9803 — Improper Authentication in lunary-ai/lunary (CVSS 8.8)
• CVE-2025-5352 — Environment Variable XSS in Analytics Component in lunary-ai/lunary (CVSS 9.6)
• CVE-2025-4962 — IDOR Vulnerability in Template Creation via `projectId` Manipulation in lunary-ai/lunary (CVSS 7.7)
• CVE-2025-4779 — Stored Cross-site Scripting (XSS) in lunary-ai/lunary (CVSS 6.1)
• CVE-2025-0281 — Stored Cross-Site Scripting (XSS) in lunary-ai/lunary (CVSS 5.4)
• CVE-2024-9099 — Exposure of Private API Keys in lunary-ai/lunary (CVSS 8.1)
• CVE-2024-9098 — Privilege Escalation in lunary-ai/lunary (CVSS 6.1)
• CVE-2024-9096 — Improper Authorization in lunary-ai/lunary (CVSS 7.1)
• CVE-2024-9095 — Improper Authorization in lunary-ai/lunary (CVSS 9.8)
• CVE-2024-9000 — Improper Authorization and Duplicate Slug Vulnerability in lunary-ai/lunary (CVSS 6.5)
• CVE-2024-8999 — Improper Access Control in lunary-ai/lunary (CVSS 7.5)
• CVE-2024-8998 — Regular Expression Denial of Service (ReDoS) in lunary-ai/lunary (CVSS 7.5)
• CVE-2024-8789 — Regular Expression Denial of Service (ReDoS) in lunary-ai/lunary (CVSS 7.5)
• CVE-2024-8765 — Improper Path Equivalence Resolution in lunary-ai/lunary (CVSS 7.3)
• CVE-2024-8764 — Improper Authorization in lunary-ai/lunary (CVSS 7.5)
• CVE-2024-8763 — Regular Expression Denial of Service (ReDoS) in lunary-ai/lunary (CVSS 7.5)
• CVE-2024-7476 — Broken Access Control in lunary-ai/lunary (CVSS 4.3)
• CVE-2024-11301 — Improper Enforcement of Unique Constraint in lunary-ai/lunary (CVSS 6.5)
• CVE-2024-11300 — Improper Access Control in lunary-ai/lunary (CVSS 6.5)
• CVE-2024-11137 — IDOR Vulnerability in PATCH `/v1/runs/:id/score` Endpoint in lunary-ai/lunary (CVSS 7.5)
• CVE-2024-10762 — Missing Authorization in lunary-ai/lunary (CVSS 8.1)
• CVE-2024-10330 — Improper Access Control in lunary-ai/lunary (CVSS 6.5)
• CVE-2024-10275 — Improper Role Modification by Admins for Billing Permissions in lunary-ai/lunary (CVSS 7.3)