Advisories · Technology

lunary-ai/lunary.

Every CVE that names lunary-ai/lunary among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2024-5386 CVE record

CVSS 9.6 CriticalCritical · CVSS 9+

Account Hijacking via Password Reset Token Leak in lunary-ai/lunary
- lunary-ai/lunary
- CWE-1125
Not analysed yet 2 Feb 2026
CVE-2024-4147 CVE record

CVSS 7.5 High

Insufficient Access Control in lunary-ai/lunary
- lunary-ai/lunary
- CWE-1220
Not analysed yet 2 Feb 2026
CVE-2025-9803 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

Improper Authentication in lunary-ai/lunary
- lunary-ai/lunary
- Authentication bypass
Not analysed yet 25 Nov 2025
CVE-2025-5352 CVE record

CVSS 8.1 High

Environment Variable XSS in Analytics Component in lunary-ai/lunary
- lunary-ai/lunary
- Cross-site scripting (XSS)
Not analysed yet 23 Aug 2025
CVE-2025-4962 CVE record

CVSS 7.7 High

IDOR Vulnerability in Template Creation via `projectId` Manipulation in lunary-ai/lunary
- lunary-ai/lunary
- Broken access control
Not analysed yet 18 Aug 2025
CVE-2025-4779 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Stored Cross-site Scripting (XSS) in lunary-ai/lunary
- lunary-ai/lunary
- Cross-site scripting (XSS)
Not analysed yet 7 Jul 2025
CVE-2024-11300 CVE record

CVSS 8.8 High

Improper Access Control in lunary-ai/lunary
- lunary-ai/lunary
- Broken access control
Not analysed yet 20 Mar 2025
CVE-2024-10272 CVE record

CVSS 7.5 High

Broken Access Control in lunary-ai/lunary
- lunary-ai/lunary
- Broken access control
Not analysed yet 20 Mar 2025
CVE-2024-8998 CVE record

CVSS 7.5 High

Regular Expression Denial of Service (ReDoS) in lunary-ai/lunary
- lunary-ai/lunary
- Denial of service
Not analysed yet 20 Mar 2025
CVE-2025-0281 CVE record

CVSS 7.3 High

Stored Cross-Site Scripting (XSS) in lunary-ai/lunary
- lunary-ai/lunary
- Cross-site scripting (XSS)
Not analysed yet 20 Mar 2025
CVE-2024-9099 CVE record

CVSS 8.8 High

Exposure of Private API Keys in lunary-ai/lunary
- lunary-ai/lunary
- CWE-1230
Not analysed yet 20 Mar 2025
CVE-2024-8765 CVE record

CVSS 7.3 High

Improper Path Equivalence Resolution in lunary-ai/lunary
- lunary-ai/lunary
- CWE-41
Not analysed yet 20 Mar 2025
CVE-2024-10330 CVE record

CVSS 6.5 Medium

Improper Access Control in lunary-ai/lunary
- lunary-ai/lunary
- Broken access control
Not analysed yet 20 Mar 2025
CVE-2024-8789 CVE record

CVSS 7.5 High

Regular Expression Denial of Service (ReDoS) in lunary-ai/lunary
- lunary-ai/lunary
- Denial of service
Not analysed yet 20 Mar 2025
CVE-2024-11301 CVE record

CVSS 6.5 Medium

Improper Enforcement of Unique Constraint in lunary-ai/lunary
- lunary-ai/lunary
- CWE-837
Not analysed yet 20 Mar 2025
CVE-2024-7476 CVE record

CVSS 4.3 Medium

Broken Access Control in lunary-ai/lunary
- lunary-ai/lunary
- Broken access control
Not analysed yet 20 Mar 2025
CVE-2024-9096 CVE record

CVSS 7.6 High

Improper Authorization in lunary-ai/lunary
- lunary-ai/lunary
- Broken access control
Not analysed yet 20 Mar 2025
CVE-2024-9098 CVE record

CVSS 7.3 High

Privilege Escalation in lunary-ai/lunary
- lunary-ai/lunary
- Broken access control
Not analysed yet 20 Mar 2025
CVE-2024-8764 CVE record

CVSS 7.5 High

Improper Authorization in lunary-ai/lunary
- lunary-ai/lunary
- Denial of service
Not analysed yet 20 Mar 2025
CVE-2024-10762 CVE record

CVSS 8.1 High

Missing Authorization in lunary-ai/lunary
- lunary-ai/lunary
- Broken access control
Not analysed yet 20 Mar 2025
CVE-2024-9000 CVE record

CVSS 7.1 High

Improper Authorization and Duplicate Slug Vulnerability in lunary-ai/lunary
- lunary-ai/lunary
- Broken access control
Not analysed yet 20 Mar 2025
CVE-2024-10275 CVE record

CVSS 7.3 High

Improper Role Modification by Admins for Billing Permissions in lunary-ai/lunary
- lunary-ai/lunary
- Broken access control
Not analysed yet 20 Mar 2025
CVE-2024-10274 CVE record

CVSS 6.5 Medium

Improper Authorization in lunary-ai/lunary
- lunary-ai/lunary
- Broken access control
Not analysed yet 20 Mar 2025
CVE-2024-11137 CVE record

CVSS 7.5 High

IDOR Vulnerability in PATCH `/v1/runs/:id/score` Endpoint in lunary-ai/lunary
- lunary-ai/lunary
- Broken access control
Not analysed yet 20 Mar 2025
CVE-2024-8763 CVE record

CVSS 7.5 High

Regular Expression Denial of Service (ReDoS) in lunary-ai/lunary
- lunary-ai/lunary
- Denial of service
Not analysed yet 20 Mar 2025
CVE-2024-8999 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Improper Access Control in lunary-ai/lunary
- lunary-ai/lunary
- Broken access control
Not analysed yet 20 Mar 2025
CVE-2024-10273 CVE record

CVSS 6.5 Medium

Improper Privilege Management in lunary-ai/lunary
- lunary-ai/lunary
- Broken access control
Not analysed yet 20 Mar 2025
CVE-2024-9095 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Improper Authorization in lunary-ai/lunary
- lunary-ai/lunary
- Broken access control
Not analysed yet 20 Mar 2025
CVE-2024-3760 CVE record

CVSS 7.5 High

Email Bombing Vulnerability in lunary-ai/lunary
- lunary-ai/lunary
- Denial of service
Not analysed yet 14 Nov 2024
CVE-2024-3502 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Exposure of Sensitive Information in lunary-ai/lunary
- lunary-ai/lunary
- Information disclosure
Not analysed yet 14 Nov 2024
CVE-2024-3501 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Exposure of Sensitive Information in lunary-ai/lunary
- lunary-ai/lunary
- Information disclosure
Not analysed yet 14 Nov 2024
CVE-2024-3379 CVE record

CVSS 9.6 CriticalCritical · CVSS 9+

Incorrect Authorization in lunary-ai/lunary
- lunary-ai/lunary
- Broken access control
Not analysed yet 14 Nov 2024
CVE-2024-7456 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

SQL Injection in lunary-ai/lunary
- lunary-ai/lunary
- SQL injection
Not analysed yet 1 Nov 2024
CVE-2024-7472 CVE record

CVSS 5.3 Medium

Email Injection Vulnerability in lunary-ai/lunary
- lunary-ai/lunary
- Other injection
Not analysed yet 29 Oct 2024
CVE-2024-7473 CVE record

CVSS 7.5 High

IDOR Vulnerability in lunary-ai/lunary
- lunary-ai/lunary
- Broken access control
Not analysed yet 29 Oct 2024
CVE-2024-7474 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

IDOR in lunary-ai/lunary
- lunary-ai/lunary
- Broken access control
Not analysed yet 29 Oct 2024
CVE-2024-7475 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Improper Access Control in lunary-ai/lunary
- lunary-ai/lunary
- Broken access control
Not analysed yet 29 Oct 2024
CVE-2024-6086 CVE record

CVSS 5.3 Medium

Improper Access Control in lunary-ai/lunary
- lunary-ai/lunary
- Broken access control
Not analysed yet 27 Jun 2024
CVE-2024-5755 CVE record

CVSS 5.3 Medium

Email Validation Bypass in lunary-ai/lunary
- lunary-ai/lunary
- CWE-821
Not analysed yet 27 Jun 2024
CVE-2024-5714 CVE record

CVSS 7.4 High

Improper Access Control in lunary-ai/lunary
- lunary-ai/lunary
- Broken access control
Not analysed yet 27 Jun 2024
CVE-2024-5328 CVE record

CVSS 8.6 High

SSRF Vulnerability in lunary-ai/lunary
- lunary-ai/lunary
- Server-side request forgery (SSRF)
Not analysed yet 6 Jun 2024
CVE-2024-5248 CVE record

CVSS 6.5 Medium

Improper Access Control in lunary-ai/lunary
- lunary-ai/lunary
- Broken access control
Not analysed yet 6 Jun 2024
CVE-2024-5130 CVE record

CVSS 7.5 High

Incorrect Authorization in lunary-ai/lunary
- lunary-ai/lunary
- Broken access control
Not analysed yet 6 Jun 2024
CVE-2024-5131 CVE record

CVSS 7.5 High

Improper Access Control in lunary-ai/lunary
- lunary-ai/lunary
- Broken access control
Not analysed yet 6 Jun 2024
CVE-2024-5129 CVE record

CVSS 8.2 High

Privilege Escalation Vulnerability in lunary-ai/lunary
- lunary-ai/lunary
- Broken access control
Not analysed yet 6 Jun 2024
CVE-2024-5133 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Account Takeover via Exposed Recovery Token in lunary-ai/lunary
- lunary-ai/lunary
- Information disclosure
Not analysed yet 6 Jun 2024
CVE-2024-5126 CVE record

CVSS 7.6 High

Improper Access Control in lunary-ai/lunary
- lunary-ai/lunary
- Broken access control
Not analysed yet 6 Jun 2024
CVE-2024-5128 CVE record

CVSS 9.4 CriticalCritical · CVSS 9+

IDOR Vulnerability in lunary-ai/lunary
- lunary-ai/lunary
- Broken access control
Not analysed yet 6 Jun 2024
CVE-2024-3504 CVE record

CVSS 8.1 High

Improper Access Control in lunary-ai/lunary
- lunary-ai/lunary
- Broken access control
Not analysed yet 6 Jun 2024
CVE-2024-5277 CVE record

CVSS 6.4 Medium

Weak Password Recovery Mechanism in lunary-ai/lunary
- lunary-ai/lunary
- CWE-640
Not analysed yet 6 Jun 2024
CVE-2024-5127 CVE record

CVSS 5.4 Medium

Improper Access Control in lunary-ai/lunary
- lunary-ai/lunary
- Broken access control
Not analysed yet 6 Jun 2024
CVE-2024-4148 CVE record

CVSS 7.5 High

Redos (Regular Expression Denial of Service) in lunary-ai/lunary
- lunary-ai/lunary
- Denial of service
Not analysed yet 1 Jun 2024
CVE-2024-4154 CVE record

CVSS 7.1 High

Incorrect Synchronization in lunary-ai/lunary
- lunary-ai/lunary
- Broken access control
Not analysed yet 21 May 2024
CVE-2024-4151 CVE record

CVSS 8.3 High

Improper Access Control in lunary-ai/lunary
- lunary-ai/lunary
- Broken access control
Not analysed yet 20 May 2024
CVE-2024-3761 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Missing Authorization on Delete Datasets in lunary-ai/lunary
- lunary-ai/lunary
- Broken access control
Not analysed yet 20 May 2024
CVE-2024-1739 CVE record

CVSS 7.5 High

Case Insensitive Email Address Validation Vulnerability in lunary-ai/lunary
- lunary-ai/lunary
- CWE-821
Not analysed yet 16 Apr 2024
CVE-2024-1626 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

IDOR Vulnerability in lunary-ai/lunary
- lunary-ai/lunary
- Broken access control
Not analysed yet 16 Apr 2024
CVE-2024-1738 CVE record

CVSS 7.5 High

Incorrect Authorization in lunary-ai/lunary
- lunary-ai/lunary
- Broken access control
Not analysed yet 16 Apr 2024
CVE-2024-1666 CVE record

CVSS 7.5 High

Unauthorized Radar Creation in lunary-ai/lunary
- lunary-ai/lunary
- Denial of service
Not analysed yet 16 Apr 2024
CVE-2024-1902 CVE record

CVSS 7.5 High

Session Reuse Vulnerability in lunary-ai/lunary
- lunary-ai/lunary
- CWE-821
Not analysed yet 10 Apr 2024