cvedb.io
CVE-2024-4148
HIGH · CVSS 7.5
EPSS exploitation probability: 0%
Published 2024-06-01T16:15:07.563 · Last modified 2026-06-17T08:01:13.520

Summary

A Regular Expression Denial of Service (ReDoS) vulnerability exists in the lunary-ai/lunary application, version 1.2.10. An attacker can exploit this vulnerability by maliciously manipulating regular expressions, which can significantly impact the response time of the application and potentially render it completely non-functional. Specifically, the vulnerability can be triggered by sending a specially crafted request to the application, leading to a denial of service where the application crashes.

Affected products

lunary — lunary

Does this affect you?

Add your gear to cvedb and we'll alert you only when lunary ships something exploited.

Check my exposure →

References

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.