https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 17 Oct 2026 17:32:46 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-1737 EUVD-2026-1737 https://cve.radiocsirt.org/vuln/euvd-2026-1737 https://cve.radiocsirt.org/vuln/fkie_cve-2024-1738 <p>An incorrect authorization vulnerability exists in the lunary-ai/lunary repository, specifically within the evaluations.get route in the evaluations API endpoint. This vulnerability allows unauthorized users to retrieve the results of any organization&#39;s evaluation by simply knowing the evaluation ID, due to the lack of project ID verification in the SQL query. As a result, attackers can gain access to potentially private data contained within the evaluation results.</p> <p>An incorrect authorization vulnerability exists in the lunary-ai/lunary repository, specifically within the evaluations.get route in the evaluations API endpoint. This vulnerability allows unauthorized users to retrieve the results of any organization&#39;s evaluation by simply knowing the evaluation ID, due to the lack of project ID verification in the SQL query. As a result, attackers can gain access to potentially private data contained within the evaluation results.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-1738 https://cve.radiocsirt.org/vuln/ghsa-pcfp-5frw-85m7 <p>An incorrect authorization vulnerability exists in the lunary-ai/lunary repository, specifically within the evaluations.get route in the evaluations API endpoint. This vulnerability allows unauthorized users to retrieve the results of any organization&#39;s evaluation by simply knowing the evaluation ID, due to the lack of project ID verification in the SQL query. As a result, attackers can gain access to potentially private data contained within the evaluation results.</p> <p>An incorrect authorization vulnerability exists in the lunary-ai/lunary repository, specifically within the evaluations.get route in the evaluations API endpoint. This vulnerability allows unauthorized users to retrieve the results of any organization&#39;s evaluation by simply knowing the evaluation ID, due to the lack of project ID verification in the SQL query. As a result, attackers can gain access to potentially private data contained within the evaluation results.</p> https://cve.radiocsirt.org/vuln/ghsa-pcfp-5frw-85m7 https://cve.radiocsirt.org/vuln/gsd-2024-1738 gsd-2024-1738 https://cve.radiocsirt.org/vuln/gsd-2024-1738