Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Release: lunary-ai/lunary 1.4.26 Clear all filters
TI-2024-08358 CVE-2024-9000 · GHSA-x552-5vh8-qccx

Improper Authorization and Duplicate Slug Vulnerability in lunary-ai/lunary

Priority MEDIUM 62

In lunary-ai/lunary before version 1.4.26, the checklists.post() endpoint allows users to create or modify checklists without validating whether the user has proper permissions.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00552 Published 2025-03-20 Fixed in 1.4.26 CWE-862
TI-2024-08357 CVE-2024-8999 · GHSA-rqrm-p43g-fpmq

Improper Access Control in lunary-ai/lunary

Priority HIGH 74

lunary-ai/lunary version v1.4.25 contains an improper access control vulnerability in the POST /api/v1/data-warehouse/bigquery endpoint.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0081 Published 2025-03-20 Fixed in 1.4.26 CWE-862