https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-07T18:38:00.093857+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cnvd-2025-08910 cnvd-2025-08910 2026-10-07T18:38:00.115059+00:00 cnvd-2025-08910 https://db.gcve.eu/vuln/fkie_cve-2024-7476 fkie_cve-2024-7476 2026-10-07T18:38:00.115234+00:00

A broken access control vulnerability exists in lunary-ai/lunary versions 1.2.7 through 1.4.2. The vulnerability allows an authenticated attacker to modify any user's templates by sending a crafted HTTP POST request to the /v1/templates/{id}/versions endpoint. This issue is resolved in version 1.4.3.

 https://db.gcve.eu/vuln/ghsa-9xvx-2953-c58g GHSA-9xvx-2953-c58g 2026-10-07T18:38:00.115375+00:00

A broken access control vulnerability exists in lunary-ai/lunary versions 1.2.7 through 1.4.2. The vulnerability allows an authenticated attacker to modify any user's templates by sending a crafted HTTP POST request to the /v1/templates/{id}/versions endpoint. This issue is resolved in version 1.4.3.