Skip to content
OpenAdvisories

Vendor

prolix-oc

5 known vulnerabilities.

Products

Lumiverse 5
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 4.8
    CVE-2026-44443

    Lumiverse: Sign-up nonce race condition allows unauthorized account registration

    Lumiverse is a full-featured AI chat application. Prior to 0.9.7, consumeNonce() only checks that the module-level variable is set and unexpired. It does not validate any value from the incoming HTTP request or bind the nonce to the admin's session. If the ad…

    prolix-oc Lumiverse