https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 19:58:16 +0000 https://cve.radiocsirt.org/vuln/cnvd-2025-06934 cnvd-2025-06934 https://cve.radiocsirt.org/vuln/cnvd-2025-06934 https://cve.radiocsirt.org/vuln/euvd-2026-223904 EUVD-2026-223904 https://cve.radiocsirt.org/vuln/euvd-2026-223904 https://cve.radiocsirt.org/vuln/fkie_cve-2024-11301 <p>In lunary-ai/lunary before version 1.6.3, the application allows the creation of evaluators without enforcing a unique constraint on the combination of projectId and slug. This allows an attacker to overwrite existing data by submitting a POST request with the same slug as an existing evaluator. The lack of database constraints or application-layer validation to prevent duplicates exposes the application to data integrity issues. This vulnerability can result in corrupted data and potentially malicious actions, impairing the system&#39;s functionality.</p> <p>In lunary-ai/lunary before version 1.6.3, the application allows the creation of evaluators without enforcing a unique constraint on the combination of projectId and slug. This allows an attacker to overwrite existing data by submitting a POST request with the same slug as an existing evaluator. The lack of database constraints or application-layer validation to prevent duplicates exposes the application to data integrity issues. This vulnerability can result in corrupted data and potentially malicious actions, impairing the system&#39;s functionality.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-11301 https://cve.radiocsirt.org/vuln/ghsa-73p4-hh43-4h48 <p>In lunary-ai/lunary before version 1.6.3, the application allows the creation of evaluators without enforcing a unique constraint on the combination of projectId and slug. This allows an attacker to overwrite existing data by submitting a POST request with the same slug as an existing evaluator. The lack of database constraints or application-layer validation to prevent duplicates exposes the application to data integrity issues. This vulnerability can result in corrupted data and potentially malicious actions, impairing the system&#39;s functionality.</p> <p>In lunary-ai/lunary before version 1.6.3, the application allows the creation of evaluators without enforcing a unique constraint on the combination of projectId and slug. This allows an attacker to overwrite existing data by submitting a POST request with the same slug as an existing evaluator. The lack of database constraints or application-layer validation to prevent duplicates exposes the application to data integrity issues. This vulnerability can result in corrupted data and potentially malicious actions, impairing the system&#39;s functionality.</p> https://cve.radiocsirt.org/vuln/ghsa-73p4-hh43-4h48