Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: lunary-ai/lunary 1.2.8 Clear all filters
TI-2024-01771 CVE-2024-1902 · GHSA-prc3-79c5-8h62

Session Reuse Vulnerability in lunary-ai/lunary

Priority HIGH 72

lunary-ai/lunary is vulnerable to a session reuse attack, allowing a removed user to change the organization name without proper authorization.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00387 Published 2024-04-10 Fixed in 1.2.8 CWE-821
TI-2024-01619 CVE-2024-1741 · GHSA-v6wm-cwm9-2486

Improper Authorization in lunary-ai/lunary

Priority HIGH 80

lunary-ai/lunary version 1.0.1 is vulnerable to improper authorization, allowing removed members to read, create, modify, and delete prompt templates using an old authorization token.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00586 Published 2024-04-10 Fixed in 1.2.8 CWE-863