Skip to content
OpenAdvisories

Vendor

lunary-ai

71 known vulnerabilities.

Products

lunary-ai/lunary 71
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.1
    CVE-2025-5352 Public exploit

    Environment Variable XSS in Analytics Component in lunary-ai/lunary

    A critical stored Cross-Site Scripting (XSS) vulnerability exists in the Analytics component of lunary-ai/lunary versions up to 1.9.23, where the NEXT_PUBLIC_CUSTOM_SCRIPT environment variable is directly injected into the DOM using dangerouslySetInnerHTML wi…

    lunary-ai lunary-ai/lunary
  • Critical 9.8
    CVE-2024-7456 Public exploit

    SQL Injection in lunary-ai/lunary

    A SQL injection vulnerability exists in the `/api/v1/external-users` route of lunary-ai/lunary version v1.4.2. The `order by` clause of the SQL query uses `sql.unsafe` without prior sanitization, allowing for SQL injection. The `orderByClause` variable is con…

    lunary-ai lunary-ai/lunary