https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-08T21:23:19.760352+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cnvd-2025-08909 cnvd-2025-08909 2026-10-08T21:23:19.783841+00:00 cnvd-2025-08909 https://db.gcve.eu/vuln/fkie_cve-2024-10330 fkie_cve-2024-10330 2026-10-08T21:23:19.783901+00:00

In lunary-ai/lunary version 1.5.6, the `/v1/evaluators/` endpoint lacks proper access control, allowing any user associated with a project to fetch all evaluator data regardless of their role. This vulnerability permits low-privilege users to access potentially sensitive evaluation data.

 https://db.gcve.eu/vuln/ghsa-fqr7-jjqq-hpr6 GHSA-fqr7-jjqq-hpr6 2026-10-08T21:23:19.783939+00:00

In lunary-ai/lunary version 1.5.6, the `/v1/evaluators/` endpoint lacks proper access control, allowing any user associated with a project to fetch all evaluator data regardless of their role. This vulnerability permits low-privilege users to access potentially sensitive evaluation data.