# cve.now: Lunary-ai

The newest entries naming Lunary-ai as an affected vendor (up to 200), of 71 in all, 0 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2024-5386](https://cve.now/CVE-2024-5386.md): Account Hijacking via Password Reset Token Leak in lunary-ai/lunary (CVSS 9.6)
- [CVE-2024-4147](https://cve.now/CVE-2024-4147.md): Insufficient Access Control in lunary-ai/lunary (CVSS 7.5)
- [CVE-2025-9803](https://cve.now/CVE-2025-9803.md): Improper Authentication in lunary-ai/lunary (CVSS 9.3)
- [CVE-2025-5352](https://cve.now/CVE-2025-5352.md): Environment Variable XSS in Analytics Component in lunary-ai/lunary (CVSS 8.1)
- [CVE-2025-4962](https://cve.now/CVE-2025-4962.md): IDOR Vulnerability in Template Creation via \`projectId\` Manipulation in lunary-ai/lunary (CVSS 7.7)
- [CVE-2025-4779](https://cve.now/CVE-2025-4779.md): Stored Cross-site Scripting (XSS) in lunary-ai/lunary (CVSS 9.1)
- [CVE-2024-11300](https://cve.now/CVE-2024-11300.md): Improper Access Control in lunary-ai/lunary (CVSS 8.8)
- [CVE-2024-10272](https://cve.now/CVE-2024-10272.md): Broken Access Control in lunary-ai/lunary (CVSS 7.5)
- [CVE-2024-8998](https://cve.now/CVE-2024-8998.md): Regular Expression Denial of Service (ReDoS) in lunary-ai/lunary (CVSS 7.5)
- [CVE-2025-0281](https://cve.now/CVE-2025-0281.md): Stored Cross-Site Scripting (XSS) in lunary-ai/lunary (CVSS 7.3)
- [CVE-2024-9099](https://cve.now/CVE-2024-9099.md): Exposure of Private API Keys in lunary-ai/lunary (CVSS 8.8)
- [CVE-2024-8765](https://cve.now/CVE-2024-8765.md): Improper Path Equivalence Resolution in lunary-ai/lunary (CVSS 7.3)
- [CVE-2024-10330](https://cve.now/CVE-2024-10330.md): Improper Access Control in lunary-ai/lunary (CVSS 6.5)
- [CVE-2024-8789](https://cve.now/CVE-2024-8789.md): Regular Expression Denial of Service (ReDoS) in lunary-ai/lunary (CVSS 7.5)
- [CVE-2024-11301](https://cve.now/CVE-2024-11301.md): Improper Enforcement of Unique Constraint in lunary-ai/lunary (CVSS 6.5)
- [CVE-2024-7476](https://cve.now/CVE-2024-7476.md): Broken Access Control in lunary-ai/lunary (CVSS 4.3)
- [CVE-2024-9096](https://cve.now/CVE-2024-9096.md): Improper Authorization in lunary-ai/lunary (CVSS 7.6)
- [CVE-2024-9098](https://cve.now/CVE-2024-9098.md): Privilege Escalation in lunary-ai/lunary (CVSS 7.3)
- [CVE-2024-8764](https://cve.now/CVE-2024-8764.md): Improper Authorization in lunary-ai/lunary (CVSS 7.5)
- [CVE-2024-10762](https://cve.now/CVE-2024-10762.md): Missing Authorization in lunary-ai/lunary (CVSS 8.1)
- [CVE-2024-9000](https://cve.now/CVE-2024-9000.md): Improper Authorization and Duplicate Slug Vulnerability in lunary-ai/lunary (CVSS 7.1)
- [CVE-2024-10275](https://cve.now/CVE-2024-10275.md): Improper Role Modification by Admins for Billing Permissions in lunary-ai/lunary (CVSS 7.3)
- [CVE-2024-10274](https://cve.now/CVE-2024-10274.md): Improper Authorization in lunary-ai/lunary (CVSS 6.5)
- [CVE-2024-11137](https://cve.now/CVE-2024-11137.md): IDOR Vulnerability in PATCH \`/v1/runs/:id/score\` Endpoint in lunary-ai/lunary (CVSS 7.5)
- [CVE-2024-8763](https://cve.now/CVE-2024-8763.md): Regular Expression Denial of Service (ReDoS) in lunary-ai/lunary (CVSS 7.5)
- [CVE-2024-8999](https://cve.now/CVE-2024-8999.md): Improper Access Control in lunary-ai/lunary (CVSS 9.8)
- [CVE-2024-10273](https://cve.now/CVE-2024-10273.md): Improper Privilege Management in lunary-ai/lunary (CVSS 6.5)
- [CVE-2024-9095](https://cve.now/CVE-2024-9095.md): Improper Authorization in lunary-ai/lunary (CVSS 9.8)
- [CVE-2024-3760](https://cve.now/CVE-2024-3760.md): Email Bombing Vulnerability in lunary-ai/lunary (CVSS 7.5)
- [CVE-2024-3502](https://cve.now/CVE-2024-3502.md): Exposure of Sensitive Information in lunary-ai/lunary (CVSS 9.1)
- [CVE-2024-3501](https://cve.now/CVE-2024-3501.md): Exposure of Sensitive Information in lunary-ai/lunary (CVSS 9.1)
- [CVE-2024-3379](https://cve.now/CVE-2024-3379.md): Incorrect Authorization in lunary-ai/lunary (CVSS 9.6)
- [CVE-2024-7456](https://cve.now/CVE-2024-7456.md): SQL Injection in lunary-ai/lunary (CVSS 9.8)
- [CVE-2024-7472](https://cve.now/CVE-2024-7472.md): Email Injection Vulnerability in lunary-ai/lunary (CVSS 5.3)
- [CVE-2024-7473](https://cve.now/CVE-2024-7473.md): IDOR Vulnerability in lunary-ai/lunary (CVSS 7.5)
- [CVE-2024-7474](https://cve.now/CVE-2024-7474.md): IDOR in lunary-ai/lunary (CVSS 9.1)
- [CVE-2024-7475](https://cve.now/CVE-2024-7475.md): Improper Access Control in lunary-ai/lunary (CVSS 9.1)
- [CVE-2024-6862](https://cve.now/CVE-2024-6862.md): Cross-Site Request Forgery (CSRF) in lunary-ai/lunary (CVSS 7.4)
- [CVE-2024-6867](https://cve.now/CVE-2024-6867.md): Information Disclosure in lunary-ai/lunary (CVSS 4.3)
- [CVE-2024-6087](https://cve.now/CVE-2024-6087.md): Improper Access Control in lunary-ai/lunary (CVSS 6.5)
- [CVE-2024-6582](https://cve.now/CVE-2024-6582.md): Broken Access Control in lunary-ai/lunary (CVSS 6.5)
- [CVE-2024-6086](https://cve.now/CVE-2024-6086.md): Improper Access Control in lunary-ai/lunary (CVSS 5.3)
- [CVE-2024-5755](https://cve.now/CVE-2024-5755.md): Email Validation Bypass in lunary-ai/lunary (CVSS 5.3)
- [CVE-2024-5714](https://cve.now/CVE-2024-5714.md): Improper Access Control in lunary-ai/lunary (CVSS 7.4)
- [CVE-2024-5389](https://cve.now/CVE-2024-5389.md): Insufficient Access Control in lunary-ai/lunary (CVSS 5.7)
- [CVE-2024-4146](https://cve.now/CVE-2024-4146.md): Incorrect Authorization in lunary-ai/lunary (CVSS 9.8)
- [CVE-2024-5328](https://cve.now/CVE-2024-5328.md): SSRF Vulnerability in lunary-ai/lunary (CVSS 8.6)
- [CVE-2024-5248](https://cve.now/CVE-2024-5248.md): Improper Access Control in lunary-ai/lunary (CVSS 6.5)
- [CVE-2024-5130](https://cve.now/CVE-2024-5130.md): Incorrect Authorization in lunary-ai/lunary (CVSS 7.5)
- [CVE-2024-5131](https://cve.now/CVE-2024-5131.md): Improper Access Control in lunary-ai/lunary (CVSS 7.5)
- [CVE-2024-5129](https://cve.now/CVE-2024-5129.md): Privilege Escalation Vulnerability in lunary-ai/lunary (CVSS 8.2)
- [CVE-2024-5133](https://cve.now/CVE-2024-5133.md): Account Takeover via Exposed Recovery Token in lunary-ai/lunary (CVSS 9.1)
- [CVE-2024-5478](https://cve.now/CVE-2024-5478.md): Cross-site Scripting (XSS) in SAML metadata endpoint in lunary-ai/lunary (CVSS 7.4)
- [CVE-2024-5126](https://cve.now/CVE-2024-5126.md): Improper Access Control in lunary-ai/lunary (CVSS 7.6)
- [CVE-2024-5128](https://cve.now/CVE-2024-5128.md): IDOR Vulnerability in lunary-ai/lunary (CVSS 9.4)
- [CVE-2024-3504](https://cve.now/CVE-2024-3504.md): Improper Access Control in lunary-ai/lunary (CVSS 8.1)
- [CVE-2024-5277](https://cve.now/CVE-2024-5277.md): Weak Password Recovery Mechanism in lunary-ai/lunary (CVSS 6.4)
- [CVE-2024-5127](https://cve.now/CVE-2024-5127.md): Improper Access Control in lunary-ai/lunary (CVSS 5.4)
- [CVE-2024-4148](https://cve.now/CVE-2024-4148.md): Redos (Regular Expression Denial of Service) in lunary-ai/lunary (CVSS 7.5)
- [CVE-2024-4154](https://cve.now/CVE-2024-4154.md): Incorrect Synchronization in lunary-ai/lunary (CVSS 7.1)
- [CVE-2024-4151](https://cve.now/CVE-2024-4151.md): Improper Access Control in lunary-ai/lunary (CVSS 8.3)
- [CVE-2024-3761](https://cve.now/CVE-2024-3761.md): Missing Authorization on Delete Datasets in lunary-ai/lunary (CVSS 9.1)
- [CVE-2024-1739](https://cve.now/CVE-2024-1739.md): Case Insensitive Email Address Validation Vulnerability in lunary-ai/lunary (CVSS 7.5)
- [CVE-2024-1626](https://cve.now/CVE-2024-1626.md): IDOR Vulnerability in lunary-ai/lunary (CVSS 9.1)
- [CVE-2024-1738](https://cve.now/CVE-2024-1738.md): Incorrect Authorization in lunary-ai/lunary (CVSS 7.5)
- [CVE-2024-1666](https://cve.now/CVE-2024-1666.md): Unauthorized Radar Creation in lunary-ai/lunary (CVSS 7.5)
- [CVE-2024-1902](https://cve.now/CVE-2024-1902.md): Session Reuse Vulnerability in lunary-ai/lunary (CVSS 7.5)
- [CVE-2024-1740](https://cve.now/CVE-2024-1740.md): Incorrect Authorization in lunary-ai/lunary (CVSS 9.1)
- [CVE-2024-1741](https://cve.now/CVE-2024-1741.md): Improper Authorization in lunary-ai/lunary (CVSS 9.1)
- [CVE-2024-1643](https://cve.now/CVE-2024-1643.md): Unauthorized Organization Access in lunary-ai/lunary (CVSS 9.1)
- [CVE-2024-1625](https://cve.now/CVE-2024-1625.md): IDOR Vulnerability in lunary-ai/lunary (CVSS 7.5)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/lunary-ai
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.