| Package | Affected versions | Patched versions |
|---|---|---|
| lunary | ≤ 1.2.11 |
In lunary-ai/lunary versions <=v1.2.11, an attacker can bypass email validation by using a dot character ('.') in the email address. This allows the creation of multiple accounts with essentially the same email address (e.g., '[email protected]' and '[email protected]'), leading to incorrect synchronization and potential security issues.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free