VYPR

lean-cve-poc

by Endrazine

CVEs (1)

  • CVE-2026-72844MedAug 20, 2026
    risk 0.34cvss 6.3epss

    The Lean 4 kernel does not verify that the structure named in a projection expression matches the type of the value being projected, and environment::add_inductive in src/kernel/inductive.cpp did not type check the nested inductive applications that are replaced by auxiliary…