PT-2025-12108

Name of the Vulnerable Software and Affected Versions feast-dev/feast version 0.40.0 Description A Cross-Origin Resource Sharing CORS issue exists, where the CORS configuration on the agentscope server does not properly restrict access to only trusted origins. This allows any external domain to...

PT-2024-37911 · Lunary Ai · Lunary

Name of the Vulnerable Software and Affected Versions: lunary-ai/lunary version 1.2.34 Description: A Cross-Site Request Forgery CSRF vulnerability exists due to overly permissive CORS settings, allowing an attacker to sign up for and create projects or use the instance as if they were a user wit...