Leanprover

3 CVEs across 2 Leanprover products. Browse Leanprover vulnerabilities, severities, and proof-of-concept exploits.

Leanprover products with known CVEs

ProductCVEs
Lean42
Vscode-Lean41
Leanprover CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-72711Medium6.32026-08-24The Lean 4 kernel does not check that the body of an opaque declaration is closed. environment::add_opaque omits the check_no_metavar_no_fvar call that the def…
CVE-2026-72844Medium6.32026-08-20The Lean 4 kernel does not verify that the structure named in a projection expression matches the type of the value being projected, and environment::add_induc…
CVE-2026-327322026-03-16Lean 4 VS Code Extension is a Visual Studio Code extension for the Lean 4 proof assistant. Projects that use @leanprover/unicode-input-component are vulnerable…