Skip to content
OpenAdvisories

Archive

23 August 2025

Vulnerabilities first published on this day (UTC), newest first.

1 result · Clear filters · Feed

  • High 8.1
    CVE-2025-5352 Public exploit

    Environment Variable XSS in Analytics Component in lunary-ai/lunary

    A critical stored Cross-Site Scripting (XSS) vulnerability exists in the Analytics component of lunary-ai/lunary versions up to 1.9.23, where the NEXT_PUBLIC_CUSTOM_SCRIPT environment variable is directly injected into the DOM using dangerouslySetInnerHTML wi…