Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Priority MEDIUM 63

The Lean 4 kernel does not verify that the structure named in a projection expression matches the type of the value being projected, and environment::add_inductive in src/kernel/inductive.cpp did not type check the neste…

CVSS 4.0MEDIUM 6.8 Local No auth User interaction EPSS 0.00187 Published 2026-08-20 Fixed in 4.32.2 CWE-843
TI-2026-25224 CVE-2026-32732 · GHSA-6ggm-pwr9-r5h2

XSS in @leanprover/unicode-input-component

Priority LOW 3

Lean 4 VS Code Extension is a Visual Studio Code extension for the Lean 4 proof assistant.

CVSS 4.0N/A 0.0 Network No auth User interaction EPSS 0.00318 Published 2026-03-13 Fixed in 0.2.0 CWE-80