Skip to content
OpenAdvisories

Vendor

lunary-ai

71 known vulnerabilities.

Products

lunary-ai/lunary 71
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.1
    CVE-2025-5352 Public exploit

    Environment Variable XSS in Analytics Component in lunary-ai/lunary

    A critical stored Cross-Site Scripting (XSS) vulnerability exists in the Analytics component of lunary-ai/lunary versions up to 1.9.23, where the NEXT_PUBLIC_CUSTOM_SCRIPT environment variable is directly injected into the DOM using dangerouslySetInnerHTML wi…

    lunary-ai lunary-ai/lunary