lunary-ai/lunary vulnerabilities
43 known vulnerabilities in lunary-ai/lunary from Lunary-ai. 43 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 9.1 Critical severity
lunary-ai/lunary: Incorrect Authorization
lunary-ai/lunary version 1.0.1 is vulnerable to improper authorization, allowing removed members to read, create, modify, and delete prompt templates using an old authorization token. Despite being removed from an organization, these members can still perform
- 9.1 Critical severity
lunary-ai/lunary: Incorrect Authorization
In lunary-ai/lunary version 1.0.1, a vulnerability exists where a user removed from an organization can still read, create, modify, and delete logs by re-using an old authorization token. The lunary web application communicates with the server using an 'Author
- 9.1 Critical severity
lunary-ai/lunary: Exposure of Sensitive Information to an Unauthorized Actor
By knowing an organization's ID, an attacker can join the organization without permission and gain the ability to read and modify all data within that organization. This vulnerability allows unauthorized access and modification of sensitive information, posing