| CVE ID | Severity | Patch | EPSS | Date |
|---|---|---|---|---|
| CVE-2024-5386 | 9.6 CRITICAL | PATCH UNDER REVIEW | 0.54% | 2026-02-02 |
| CVE-2024-4147 PoC | 7.5 HIGH | PATCH UNDER REVIEW | 0.03% | 2026-02-02 |
| CVE-2025-9803 | 9.3 CRITICAL | PATCH UNDER REVIEW | 0.47% | 2025-11-25 |
| CVE-2025-5352 PoC | 8.1 HIGH | PATCH UNDER REVIEW | 0.22% | 2025-08-23 |
| CVE-2025-4779 | 9.1 CRITICAL | PATCH UNDER REVIEW | 0.48% | 2025-07-07 |
| CVE-2024-11300 | 8.8 HIGH | PATCH UNDER REVIEW | 0.71% | 2025-03-20 |
| CVE-2024-10272 PoC | 7.5 HIGH | PATCH UNDER REVIEW | 0.20% | 2025-03-20 |
| CVE-2024-8998 PoC | 7.5 HIGH | PATCH UNDER REVIEW | 0.36% | 2025-03-20 |
| CVE-2025-0281 PoC | 7.3 HIGH | PATCH UNDER REVIEW | 0.28% | 2025-03-20 |
| CVE-2024-9099 | 8.8 HIGH | PATCH UNDER REVIEW | 0.58% | 2025-03-20 |
| CVE-2024-8765 PoC | 7.3 HIGH | PATCH UNDER REVIEW | 0.30% | 2025-03-20 |
| CVE-2024-10330 PoC | 6.5 MEDIUM | PATCH UNDER REVIEW | 0.17% | 2025-03-20 |
| CVE-2024-8789 PoC | 7.5 HIGH | PATCH UNDER REVIEW | 0.47% | 2025-03-20 |
| CVE-2024-11301 PoC | 6.5 MEDIUM | PATCH UNDER REVIEW | 0.22% | 2025-03-20 |
| CVE-2024-7476 PoC | 4.3 MEDIUM | PATCH UNDER REVIEW | 0.23% | 2025-03-20 |
| CVE-2024-9096 PoC | 7.6 HIGH | PATCH UNDER REVIEW | 0.14% | 2025-03-20 |
| CVE-2024-9098 PoC | 7.3 HIGH | PATCH UNDER REVIEW | 0.13% | 2025-03-20 |
| CVE-2024-8764 PoC | 7.5 HIGH | PATCH UNDER REVIEW | 0.42% | 2025-03-20 |
| CVE-2024-10762 PoC | 8.1 HIGH | PATCH UNDER REVIEW | 0.13% | 2025-03-20 |
| CVE-2024-9000 PoC | 7.1 HIGH | PATCH UNDER REVIEW | 0.07% | 2025-03-20 |
Lunary-ai is a small, private software company based in the United States that provides an AI observability and monitoring platform for large language model (LLM) applications. Its products focus on helping developers track, debug, and secure AI workflows, making it relevant to cybersecurity in the context of AI supply chain risk and model behavior auditing. The company has 69 tracked CVEs, indicating a modest but notable security footprint in the AI tooling space.
Based on 18 critical CVEs, 0 CISA KEV, 100% unpatched. Model: GDPR Art.83 · not legal advice.