Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

lunary-ai/lunary — Vulnerabilities & Security Advisories 71

All 71 CVE vulnerabilities found in lunary-ai/lunary, with AI-generated Chinese analysis, references, and POCs.

This page aggregates known security vulnerabilities affecting the lunary-ai/lunary product family. It collects public advisories documenting various weakness types, including cross-site scripting, dependency confusion, and insecure deserialization issues. The entries span the project’s entire development history, covering all recorded defects. Readers can track the vendor’s advisory timeline, analyze specific weakness classes, and review the product’s complete vulnerability record.

Vendor: lunary-ai

CVE ID Title CVSS Severity Published
CVE-2024-3501 Exposure of Sensitive Information in lunary-ai/lunary CWE-922 9.1 - 2024-11-14
CVE-2024-3379 Incorrect Authorization in lunary-ai/lunary CWE-863 7.1 - 2024-11-14
CVE-2024-7456 SQL Injection in lunary-ai/lunary CWE-89 9.8AI Critical AI 2024-11-01
CVE-2024-7472 Email Injection Vulnerability in lunary-ai/lunary CWE-93 5.3AI Medium AI 2024-10-29
CVE-2024-7473 IDOR Vulnerability in lunary-ai/lunary CWE-639 4.3AI Medium AI 2024-10-29
CVE-2024-7474 IDOR in lunary-ai/lunary CWE-639 7.1AI High AI 2024-10-29
CVE-2024-7475 Improper Access Control in lunary-ai/lunary CWE-862 7.5AI High AI 2024-10-29
CVE-2024-6862 Cross-Site Request Forgery (CSRF) in lunary-ai/lunary CWE-352 8.8AI High AI 2024-09-13
CVE-2024-6867 Information Disclosure in lunary-ai/lunary CWE-1220 4.3AI Medium AI 2024-09-13
CVE-2024-6087 Improper Access Control in lunary-ai/lunary CWE-639 8.8AI High AI 2024-09-13
CVE-2024-6582 Broken Access Control in lunary-ai/lunary CWE-306 6.1AI Medium AI 2024-09-13
CVE-2024-6086 Improper Access Control in lunary-ai/lunary CWE-863 4.3AI Medium AI 2024-06-27
CVE-2024-5755 Email Validation Bypass in lunary-ai/lunary CWE-821 5.3AI Medium AI 2024-06-27
CVE-2024-5714 Improper Access Control in lunary-ai/lunary CWE-863 8.8AI High AI 2024-06-27
CVE-2024-5389 Insufficient Access Control in lunary-ai/lunary CWE-1220 4.3 - 2024-06-09
CVE-2024-4146 Incorrect Authorization in lunary-ai/lunary CWE-863 9.8 Critical 2024-06-08
CVE-2024-5328 SSRF Vulnerability in lunary-ai/lunary CWE-918 9.8AI Critical AI 2024-06-06
CVE-2024-5248 Improper Access Control in lunary-ai/lunary CWE-862 4.3AI Medium AI 2024-06-06
CVE-2024-5130 Incorrect Authorization in lunary-ai/lunary CWE-862 5.3AI Medium AI 2024-06-06
CVE-2024-5131 Improper Access Control in lunary-ai/lunary CWE-639 4.3AI Medium AI 2024-06-06
CVE-2024-5129 Privilege Escalation Vulnerability in lunary-ai/lunary CWE-862 8.1AI High AI 2024-06-06
CVE-2024-5133 Account Takeover via Exposed Recovery Token in lunary-ai/lunary CWE-200 8.0AI High AI 2024-06-06
CVE-2024-5478 Cross-site Scripting (XSS) in SAML metadata endpoint in lunary-ai/lunary CWE-79 6.1AI Medium AI 2024-06-06
CVE-2024-5126 Improper Access Control in lunary-ai/lunary CWE-862 4.3AI Medium AI 2024-06-06
CVE-2024-5128 IDOR Vulnerability in lunary-ai/lunary CWE-639 7.6AI High AI 2024-06-06
CVE-2024-3504 Improper Access Control in lunary-ai/lunary CWE-863 4.9AI Medium AI 2024-06-06
CVE-2024-5277 Weak Password Recovery Mechanism in lunary-ai/lunary CWE-640 9.8AI Critical AI 2024-06-06
CVE-2024-5127 Improper Access Control in lunary-ai/lunary CWE-862 8.1AI High AI 2024-06-06
CVE-2024-4148 Redos (Regular Expression Denial of Service) in lunary-ai/lunary CWE-1333 7.5 - 2024-06-01
CVE-2024-4154 Incorrect Synchronization in lunary-ai/lunary CWE-639 7.1AI High AI 2024-05-21

All 71 known CVE vulnerabilities affecting lunary-ai/lunary with full Chinese analysis, references, and POCs where available.