repository icon
lunary-ai / lunary Project repository

The production toolkit for LLMs. Observability, prompt management and evaluations.

Submit a report

FIRST INTERACTION

WITHIN5 DAYS

REVIEW

WITHIN28 DAYS

FIX

WITHIN81 DAYS

SQL Injection bypass in /api/v1/external-users Route
sahiloj
self closed
Stored XSS via Citation URLs
sahiloj
spam
Unauthenticated Stored XSS via dangerouslySetInnerHTML
codevigilanteofficial
Critical
•CVE-2025-4779
Cross-Site Scripting (XSS) via dangerouslySetInnerHTML in Lunary
captain-n3m0
self closed
IDOR Vulnerabilities in /v1/providers Lunary API
sharokhataie
not applicable
Attacker is able to read and update information from victims dashboard
brotheralameen1
spam
When logout, session is not handled proeprly.
webbdays
spam
Reintroduced CSRF on login endpoint
patrik-ha
informative
Medium
Stored Cross-Site Scripting (XSS) via SAML IdP XML Injection
sharokhataie
High
•$450•CVE-2025-0281
The inviter can verify the email of invitee with the join token.
webbdays
spam
Any can access another users /usage data given they knows the org id of the user...
webbdays
spam
There is no rate limit and auth for /send-verification API
webbdays
not applicable
Email Bombing Vulnerability in `Send Verification Email` Endpoint
sharokhataie
duplicate
High
Improper access of prompt data by another user.
webbdays
High
•$450•CVE-2024-11300
Lack of unique constraint validation allows overwriting evaluators
antonin36330
Medium
•$75•CVE-2024-11301
test
particle-ioa
spam
IDOR Vulnerability in PATCH `/v1/runs/:id/score` Endpoint Allows Unauthorized Sc...
sharokhataie
High
•$450•CVE-2024-11137
Lack of proper access control on endpoint to delete evaluators
antonin36330
High
•$450•CVE-2024-10762
Missing access control on endpoint to list all evaluations in lunary-ai/lunary
antonin36330
Medium
•$75•CVE-2024-10330
Improper Role Modification by Admins for Billing Permissions
antonin36330
High
•$450•CVE-2024-10275
Lack of access control on /users/me/org endpoint
antonin36330
Medium
•$75•CVE-2024-10274
Bypass Vulnerability - Adding Users to a Free Plan Team Without Invite Privilege...
sharokhataie
not applicable
Race Condition Leading to Adding More Than 3 Projects for a Free Plan Organizati...
sharokhataie
duplicate
High
Improper Privilege Management Allows Viewer Role to Modify Owner’s Models
sharokhataie
Medium
•$75•CVE-2024-10273
IDOR- allow view any prompts in any projects
testtttpv1
duplicate
High
Broken Access Control
0ozero0
High
•$540•CVE-2024-10272
Exposure of private API keys to unauthorized users
antonin36330
High
•$450•CVE-2024-9099
Privilege escalation allows admins to gain access to billing resources
antonin36330
High
•$450•CVE-2024-9098
Improper authorization allows low-privilege users to modify checklists
antonin36330
High
•$450•CVE-2024-9096
Improper authorization in /bigquery export route
antonin36330
Critical
•$900•CVE-2024-9095
Redos (Regular Expression Denial of Service)
oicu0619
High
•$450•CVE-2024-8998
Unauthorized database export to Google BigQuery
antonin36330
Critical
•$900•CVE-2024-8999
Missing access control and duplicate check on checklists POST Endpoint
antonin36330
High
•$450•CVE-2024-9000
Redos (Regular Expression Denial of Service)
oicu0619
High
•$450•CVE-2024-8789
endpoint privilege is not properly checked, lead to unauth attacker visiting sen...
oicu0619
High
•$450•CVE-2024-8765
Sensitive api exposed to anyone
oicu0619
informative
Medium
lunary support user upload his own regular expression and run at server side, wh...
oicu0619
High
•$450•CVE-2024-8764
Redos (Regular Expression Denial of Service) on lunary
oicu0619
High
•$450•CVE-2024-8763
MTA-STS Records not Found
vaibhavjain122
not applicable
SQL injection in the `/api/v1/external-users` route
antonin36330
Critical
•$900•CVE-2024-7456
ReDOS through text matching endpoint in Flask ML server
patrik-ha
informative
High
CORS Misconfiguration
alicaz
informative
High
Hyperlink injection on singup
vaibhavjain122
duplicate
Medium
Unauthorized Email Injection Vulnerability
vn-ncvinh
Medium
•$75•CVE-2024-7472
Idor update any prompts
meme-dm
High
•$450•CVE-2024-7473
IDOR allow view/delete external_user
meme-dm
Critical
•$900•CVE-2024-7474
Improper Access Control on SAML Configuration
mvlttt
Critical
•$900•CVE-2024-7475
SSRF
mvlttt
informative
High
CSRF on endpoint for user signup
patrik-ha
High
•$450•CVE-2024-6862
Business logic, permanent account takeover with endpoint /auth/signup
vn-ncvinh
informative
Medium
Improper reset password token handling allows permanently account takeover
vn-ncvinh
duplicate
Medium
Unauthorized Email Injection Vulnerability
vn-ncvinh
not applicable
Project name not validate length
kevinkien
informative
High
Attacker can Add new user to any Project leadings to leaked data (eg: datasets,...
sofyanmoch
informative
High
Lack of HTTPS / SSL certificate on Python Flask ML server
antonin36330
informative
High
•CVE-2024-5388
Flash Python server completely unprotected
antonin36330
informative
High
Broken access control
d47secc
Medium
•$90•CVE-2024-6582
IDOR - Unauthenticated User can view any datasets in https://github.com/lunary-a...
sofyanmoch
not applicable
Email verification bypass
saymenn
informative
Medium
Improper access control-allow update prompt that is deployed in
d47secc
duplicate
Medium
SSRF in download-idp-xml SAML
d47secc
duplicate
Critical
Broken access control due to improper implementation of authorization using the...
d47secc
informative
Medium
Organization Takeover due to incorrect authorization
d47secc
informative
High
Broken access control
d47secc
self closed
Improper project validation, any user can gain access to any project
patrik-ha
informative
Critical
Instantiate enterprise-only roles without enterprise plan
patrik-ha
not applicable
Run info leak without valid authorization
patrik-ha
Medium
•$75•CVE-2024-6867
Inject log events for any project
patrik-ha
self closed
Account takeover through the invite-functionality for newly registered users
patrik-ha
Medium
•$75•CVE-2024-6087
Lack of pagination when returning evaluation results causes performance issues
acciobugs
informative
Medium
Reuse of invitation join token leads to account takeover
thelicato
informative
High
Incorrect management of projects during user invitation leads to IDOR on other o...
thelicato
duplicate
Critical
Frameable response - potential Clickjacking
acciobugs
informative
Medium
A user can create/get/edit/delete prompt variations for datasets from other orgs
acciobugs
Medium
•$900•CVE-2024-5389
Organizations can add any number of users via the API without restriction
antonin36330
informative
High
•CVE-2024-4155
A user can delete prompts from other orgs
acciobugs
High
•$450•CVE-2024-4147
User can access unauthorized projects from org
antonin36330
Critical
•$900•CVE-2024-4146
Evaluation allowance per organization does not go down when an new evaluation is...
antonin36330
not applicable
•CVE-2024-4152
The password reset link does not expire
h2oa
duplicate
High
Creating account with same email (bypass https://huntr.com/bounties/2ca70ba5-b6a...
h2oa
Medium
•$75•CVE-2024-5755
Redos (Regular Expression Denial of Service)
mvlttt
High
•$450•CVE-2024-4148
Deleting a dataset doesn't require authentication
antonin36330
duplicate
Critical
Mail bombing: rate-limit absent on forgot-password page
antonin36330
High
•$450•CVE-2024-3760
[reopen]Broken Access Control in "POST /v1/templates/{id}/versions"
t1m0n0
Medium
•$75•CVE-2024-7476
XSS in SAML metadata endpoint
monairy
High
•$450•CVE-2024-5478
Any role can change Org's name
acciobugs
Medium
•$75•CVE-2024-6086
SSRF through backend endpoint auth api
codevigilanteofficial
High
•$450•CVE-2024-5328
Prompt editor role has access to full list of Org users
acciobugs
Medium
•$75•CVE-2024-5248
Account recovery hash of users are returned in the responses
antonin36330
Critical
•$900•CVE-2024-3502
Single-use tokens of users are returned in the responses
antonin36330
Critical
•$1080•CVE-2024-3501
A member can invite/change other users to someone else's project / can change ot...
acciobugs
High
•$540•CVE-2024-5714
SSRF through backend endpoint auth api
codevigilanteofficial
not applicable
Reset password token not invalidated after use
acciobugs
Medium
•$75•CVE-2024-5277
Bypass of server-side project limit allows a free plan user to create more than...
acciobugs
informative
Medium
Account takeover - User can change password of any member as recovery token is e...
acciobugs
duplicate
Critical
•CVE-2024-5133
bypass payment and add more user than limit
ranjit-git
not applicable
•CVE-2024-4153
viewer role user can hijack other user account via password reset token leak
ranjit-git
Critical
•$900•CVE-2024-5386
admin user can promote himself to owner role and can control all over the org
ranjit-git
informative
High
A free plan user is able to invite/join more members than the allowed amount
acciobugs
informative
Critical
•CVE-2024-5132
unprivileged user can rename a project
ranjit-git
High
•$540•CVE-2024-4154
Improper access control-allow update org user to org owner
fewword
High
•$450•CVE-2024-3504
A user from free plan can invite other members assigning them any role and they...
acciobugs
informative
Medium
•CVE-2024-5127
unprivileged user can re-generate private key for project
ranjit-git
Critical
•$900•CVE-2024-3379
Change user role without upgrading or paying money
ranjit-git
not applicable
•CVE-2024-3380
idor bug to change any prompts
sunrisexu
duplicate
High
Improper access control-allow update prompt that is deployed
fewword
High
•$450•CVE-2024-5126
Password hash of users are returned in the responses
acciobugs
duplicate
Medium
•CVE-2024-3381
IDOR- allow to view any result in any evaluations/projects
fewword
duplicate
High
IDOR- allow view/update/delete any dataset_prompt/dataset_prompt_variation in an...
fewword
Critical
•$1440•CVE-2024-5128
Privilege Escalation Vulnerability to delete any datasets
fewword
High
•$450•CVE-2024-5129
IDOR- allow view/update any prompts in any projects
fewword
High
•$450•CVE-2024-4151
IDOR- allow view any prompts in any projects
fewword
High
•$450•CVE-2024-5131
Unauthenticated delete any dataset
meme-dm
High
•$450•CVE-2024-5130
Missing Authorization on Delete Datasets
thelicato
Critical
•$900•CVE-2024-3761
reuse of old session to change organization name
surayp
High
•$540•CVE-2024-1902
Get the result of any org's evaluation
antonin36330
High
•$900•CVE-2024-1738
creating account with same email
surayp
High
•$540•CVE-2024-1739
removed user from a org can read/create/modify/delete logs
ranjit-git
Critical
•$1620•CVE-2024-1740
Member can read/create/modify/delete templates even after removed from organizat...
ranjit-git
Critical
•$1800•CVE-2024-1741
Create evaluation without paying money
ranjit-git
not applicable
•CVE-2024-1665
Create radar without paying money
ranjit-git
not applicable
•CVE-2024-1666
idor bug to delete any org project
ranjit-git
High
•$1080•CVE-2024-1625
bypass payment and create more project than limit without paying extra money
ranjit-git
not applicable
•CVE-2024-1599
idor bug to delete any org project
ranjit-git
not applicable
idor bug to change any org project
ranjit-git
Critical
•$1080•CVE-2024-1626
join any organization and read/modify all data
ranjit-git
Critical
•$1080•CVE-2024-1643