| Package | Affected versions | Patched versions |
|---|---|---|
| lunary | < 1.4.9 | 1.4.9 |
lunary-ai/lunary is vulnerable to broken access control in the latest version. An attacker can view the content of any dataset without any kind of authorization by sending a GET request to the /v1/datasets endpoint without a valid authorization token.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free