Skip to content
OpenAdvisories
High · 7.5 CVE-2024-8764 EUVD-2025-6900GHSA-j8x9-qc9m-rmhj

Improper Authorization in lunary-ai/lunary

Published Mar 20, 2025 · Updated Oct 15, 2025 · Assigned by @huntr_ai

Description

A vulnerability in lunary-ai/lunary, as of commit be54057, allows users to upload and execute arbitrary regular expressions on the server side. This can lead to a Denial of Service (DoS) condition, as certain regular expressions can cause excessive resource consumption, blocking the server from processing other requests.

Affected products

VendorProductAffectedFixed
lunary-ai lunary-ai/lunary unspecified – < 1.4.23 1.4.23

References