Leanprover Lean4
2 CVEs affecting Leanprover Lean4. Latest disclosed: 2026-08-24. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-72711 | Medium | 6.3 | 2026-08-24 | The Lean 4 kernel does not check that the body of an opaque declaration is closed. environment::add_opaque omits the check_no_metavar_no_fvar call that the def… |
CVE-2026-72844 | Medium | 6.3 | 2026-08-20 | The Lean 4 kernel does not verify that the structure named in a projection expression matches the type of the value being projected, and environment::add_induc… |