TI-2024-08131 CVE-2024-8765 · GHSA-p2f3-rm9r-rxgj
Improper Path Equivalence Resolution in lunary-ai/lunary
Priority HIGH 71
In lunary-ai/lunary, the privilege check mechanism is flawed in version git afc5df4.
Vulnerabilities
4 records
TI-2024-08155 CVE-2024-8789 · GHSA-jfm2-hq55-pxgq
Regular Expression Denial of Service (ReDoS) in lunary-ai/lunary
Priority HIGH 72
Lunary-ai/lunary version git 105a3f6 is vulnerable to a Regular Expression Denial of Service (ReDoS) attack.
TI-2024-08130 CVE-2024-8764 · GHSA-j8x9-qc9m-rmhj
Improper Authorization in lunary-ai/lunary
Priority HIGH 72
A vulnerability in lunary-ai/lunary, as of commit be54057, allows users to upload and execute arbitrary regular expressions on the server side.
TI-2024-08129 CVE-2024-8763 · GHSA-jqgv-3ch9-c9qv
Regular Expression Denial of Service (ReDoS) in lunary-ai/lunary
Priority HIGH 72
A Regular Expression Denial of Service (ReDoS) vulnerability exists in the lunary-ai/lunary repository, specifically in the compileTextTemplate function.