CVE-2024-8789

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2024-8789

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-8789.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2024-8789

Published

2025-03-20T10:10:28Z

Modified

2026-10-21T02:51:59Z

Severity

7.5 (High) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator

Summary

Regular Expression Denial of Service (ReDoS) in lunary-ai/lunary

Details

Lunary-ai/lunary version git 105a3f6 is vulnerable to a Regular Expression Denial of Service (ReDoS) attack. The application allows users to upload their own regular expressions, which are then executed on the server side. Certain regular expressions can have exponential runtime complexity relative to the input size, leading to potential denial of service. An attacker can exploit this by submitting a specially crafted regular expression, causing the server to become unresponsive for an arbitrary length of time.

Database specific

{
    "cna_assigner":  "@huntr_ai",
    "cwe_ids":  [
        "CWE-1333"
    ],
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/8xxx/CVE-2024-8789.json",
    "unresolved_ranges":  [
        {
            "extracted_events":  [
                {
                    "range":  [
                        {
                            "fixed":  "1.4.23"
                        }
                    ],
                    "source":  "AFFECTED_FIELD",
                    "strategy":  "SplitRange"
                }
            ]
        }
    ]
}

References

Affected packages

Git / github.com/lunary-ai/lunary

Affected ranges

Type

GIT

Repo

https://github.com/lunary-ai/lunary

Events

Introduced

Last Affected

105a3f6

Database specific

Show details

{
    "extracted_events":  [
        {
            "range":  [
                {
                    "introduced":  "0"
                },
                {
                    "last_affected":  "105a3f6"
                }
            ],
            "source":  "DESCRIPTION"
        }
    ]
}

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-8789.json"