Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 22 Oct 2026 21:35:58 +0000 cnvd-2025-06933 https://cve.radiocsirt.org/vuln/cnvd-2025-06933 cnvd-2025-06933 https://cve.radiocsirt.org/vuln/cnvd-2025-06933 EUVD-2026-224036 https://cve.radiocsirt.org/vuln/euvd-2026-224036 EUVD-2026-224036 https://cve.radiocsirt.org/vuln/euvd-2026-224036 fkie_cve-2024-10762 https://cve.radiocsirt.org/vuln/fkie_cve-2024-10762 <p>In lunary-ai/lunary before version 1.5.9, the /v1/evaluators/ endpoint allows users to delete evaluators of a project by sending a DELETE request. However, the route lacks proper access control, such as middleware to ensure that only users with appropriate roles can delete evaluator data. This vulnerability allows low-privilege users to delete evaluators data, causing permanent data loss and potentially hindering operations.</p> <p>In lunary-ai/lunary before version 1.5.9, the /v1/evaluators/ endpoint allows users to delete evaluators of a project by sending a DELETE request. However, the route lacks proper access control, such as middleware to ensure that only users with appropriate roles can delete evaluator data. This vulnerability allows low-privilege users to delete evaluators data, causing permanent data loss and potentially hindering operations.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-10762 GHSA-mq8r-j55w-fv46 https://cve.radiocsirt.org/vuln/ghsa-mq8r-j55w-fv46 <p>In lunary-ai/lunary before version 1.5.9, the /v1/evaluators/ endpoint allows users to delete evaluators of a project by sending a DELETE request. However, the route lacks proper access control, such as middleware to ensure that only users with appropriate roles can delete evaluator data. This vulnerability allows low-privilege users to delete evaluators data, causing permanent data loss and potentially hindering operations.</p> <p>In lunary-ai/lunary before version 1.5.9, the /v1/evaluators/ endpoint allows users to delete evaluators of a project by sending a DELETE request. However, the route lacks proper access control, such as middleware to ensure that only users with appropriate roles can delete evaluator data. This vulnerability allows low-privilege users to delete evaluators data, causing permanent data loss and potentially hindering operations.</p> https://cve.radiocsirt.org/vuln/ghsa-mq8r-j55w-fv46