CVE-2024-8764

NONE EPSS 50.7%
Published Mar 20, 20251y ago · Modified Jun 17, 20261w ago
Find Similar
Published Mar 20, 2025 1y ago
Last Modified Jun 17, 2026 1w ago

Description

A vulnerability in lunary-ai/lunary, as of commit be54057, allows users to upload and execute arbitrary regular expressions on the server side. This can lead to a Denial of Service (DoS) condition, as certain regular expressions can cause excessive resource consumption, blocking the server from processing other requests.

Threat Intelligence

EPSS Exploit Probability
50.7% percentile
Exploit & Patch Status
Public Exploit Known
Patch Available

Weaknesses 1

CWE-1333

Affected Products 1

VendorProductVersionRange
lunarylunary* <1.4.23

References 2

  • github.com https://github.com/lunary-ai/lunary/commit/7ff89b0304d191534b924cf063f3648206d497fa
    Patch
  • huntr.com https://huntr.com/bounties/088c04a1-d23a-47f2-9d7c-b84d7332868d
    ExploitThird Party Advisory

Remediation

  • github.com https://github.com/lunary-ai/lunary/commit/7ff89b0304d191534b924cf063f3648206d497fa
    Patch