https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 21:23:20 +0000 https://db.gcve.eu/vuln/cnvd-2025-08909 cnvd-2025-08909 https://db.gcve.eu/vuln/cnvd-2025-08909 https://db.gcve.eu/vuln/fkie_cve-2024-10330 <p>In lunary-ai/lunary version 1.5.6, the `/v1/evaluators/` endpoint lacks proper access control, allowing any user associated with a project to fetch all evaluator data regardless of their role. This vulnerability permits low-privilege users to access potentially sensitive evaluation data.</p> <p>In lunary-ai/lunary version 1.5.6, the `/v1/evaluators/` endpoint lacks proper access control, allowing any user associated with a project to fetch all evaluator data regardless of their role. This vulnerability permits low-privilege users to access potentially sensitive evaluation data.</p> https://db.gcve.eu/vuln/fkie_cve-2024-10330 https://db.gcve.eu/vuln/ghsa-fqr7-jjqq-hpr6 <p>In lunary-ai/lunary version 1.5.6, the `/v1/evaluators/` endpoint lacks proper access control, allowing any user associated with a project to fetch all evaluator data regardless of their role. This vulnerability permits low-privilege users to access potentially sensitive evaluation data.</p> <p>In lunary-ai/lunary version 1.5.6, the `/v1/evaluators/` endpoint lacks proper access control, allowing any user associated with a project to fetch all evaluator data regardless of their role. This vulnerability permits low-privilege users to access potentially sensitive evaluation data.</p> https://db.gcve.eu/vuln/ghsa-fqr7-jjqq-hpr6