Advisories · Technology
prolix-oc Lumiverse.
Every CVE that names prolix-oc Lumiverse among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 4.8 Medium
Lumiverse: Sign-up nonce race condition allows unauthorized account registration
- prolix-oc Lumiverse
- Race condition
- CVSS 9.1 CriticalCritical · CVSS 9+
Lumiverse: Spindle extension install runs untrusted lifecycle scripts before security scan
- prolix-oc Lumiverse
- Command injection
- CVSS 9.1 CriticalCritical · CVSS 9+
Lumiverse: SMB `exists()` basename injection via smbclient `!cmd` escape
- prolix-oc Lumiverse
- Command injection
- CVSS 9.3 CriticalCritical · CVSS 9+
Lumiverse: TSX component sandbox escape via DOM ref and string-split identifier bypass
- prolix-oc Lumiverse
- CWE-693
- CVSS 9.9 CriticalCritical · CVSS 9+
Lumiverse: RCE via MCP stdio argument injection
- prolix-oc Lumiverse
- Command injection