EUVD-2025-7078

Malicious code in bioql PyPI...

CVE-2024-10330: Missing Authorization

In lunary-ai/lunary version 1.5.6, the /v1/evaluators/ endpoint lacks proper access control, allowing any user associated with a project to fetch all evaluator data regardless of their role. This vulnerability permits low-privilege users to access potentially sensitive evaluation data...