https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T02:49:22.592870+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2025-06934 cnvd-2025-06934 2026-10-06T02:49:22.659791+00:00 cnvd-2025-06934 https://cve.radiocsirt.org/vuln/euvd-2026-223904 EUVD-2026-223904 2026-10-06T02:49:22.659829+00:00 EUVD-2026-223904 https://cve.radiocsirt.org/vuln/fkie_cve-2024-11301 fkie_cve-2024-11301 2026-10-06T02:49:22.659844+00:00

In lunary-ai/lunary before version 1.6.3, the application allows the creation of evaluators without enforcing a unique constraint on the combination of projectId and slug. This allows an attacker to overwrite existing data by submitting a POST request with the same slug as an existing evaluator. The lack of database constraints or application-layer validation to prevent duplicates exposes the application to data integrity issues. This vulnerability can result in corrupted data and potentially malicious actions, impairing the system's functionality.

 https://cve.radiocsirt.org/vuln/ghsa-73p4-hh43-4h48 GHSA-73p4-hh43-4h48 2026-10-06T02:49:22.659877+00:00

In lunary-ai/lunary before version 1.6.3, the application allows the creation of evaluators without enforcing a unique constraint on the combination of projectId and slug. This allows an attacker to overwrite existing data by submitting a POST request with the same slug as an existing evaluator. The lack of database constraints or application-layer validation to prevent duplicates exposes the application to data integrity issues. This vulnerability can result in corrupted data and potentially malicious actions, impairing the system's functionality.