https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-20T08:15:06.380883+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2024-7473 CVE-2024-7473 — IDOR Vulnerability in lunary-ai/lunary 2026-10-20T08:15:06.383027+00:00

Affected: lunary-ai/lunary, lunary-ai lunary

An IDOR vulnerability exists in the 'Evaluations' function of the 'umgws datasets' section in lunary-ai/lunary versions 1.3.2. This vulnerability allows an authenticated user to update other users' prompts by manipulating the 'id' parameter in the request. The issue is fixed in version 1.4.3.