leanprover
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| lean4 | 2 | – | Aug 24, 2026 |
| vscode-lean4 | 1 | – | Mar 13, 2026 |
Exploited and recent CVEs
- CVE-2026-72711 Lean 4 before 4.32.2 Kernel Accepts Opaque Declaration With an Unbound Free Variable 0.2%
- CVE-2026-72844 Lean 4 Kernel Type Checking Bypass via Mismatched Structure Projections 0.2%
- CVE-2026-32732 XSS in @leanprover/unicode-input-component 0.3%