ReDoS Vulnerability in Lunary Repository Affecting Lunary-AI

CVE-2024-8763

What is CVE-2024-8763?

A vulnerability has been identified in the Lunary repository within the compileTextTemplate function, where the regular expression /{{(.*?)}}/g is prone to Regular Expression Denial of Service (ReDoS). This issue allows an attacker to craft inputs containing an excessive number of braces, leading to increased processing time and potentially causing the server to hang indefinitely. As a result, legitimate requests may go unprocessed, impacting overall system availability and performance.

References