[GHSA-3mwc-2cj7-gx8c] lunary-ai/lunary Access Control Vulnerability in Prompt Variation Management

[vincelwt]

Updates

• Affected products
• CVSS v3
• Severity

Comments
The NPM package is not tied to this repo. This vulnerability concerns the main repo, not the NPM compagnon package.

[darakian]

Hey there 👋
Can you help me understand why the npm package is not affected? I see that there's no repo linked on the npm page
https://www.npmjs.com/package/lunary
Do you know where the code for the package originates and how I might validate that?

Same question on #5008 as well :)