VYPR
Vendor

Endrazine

Products
3
CVEs
5
Across products
5
Status
Private

Products

3

Recent CVEs

5
  • CVE-2026-72714MedAug 24, 2026
    risk 0.41cvss 6.3epss 0.00

    Rocq Prover does not restore the universe graph's copy of the universe checking flag when a module that locally disabled the check is closed. Local Unset Universe Checking inside a module is expected to last only until the module ends, and the global flag is restored, but the…

  • CVE-2020-37268MedAug 24, 2026
    risk 0.41cvss 6.3epss 0.00

    Print Assumptions does not report that a definition was produced while universe checking was disabled when that definition reaches the caller through Parameter Inline in a module type. Applying a functor inlines the body of the parameter, and the inlining drops the record that…

  • CVE-2026-72704MedAug 24, 2026
    risk 0.34cvss 6.3epss 0.00

    The guard checker in Rocq Prover does not recheck the recursive tree representation of an inductive type parameter after that parameter has been changed by transport. A fixpoint may apply a rewrite along an equality between types to its recursive argument, which the guard…

  • CVE-2026-72703MedAug 24, 2026
    risk 0.34cvss 6.3epss 0.00

    The guard checker in Rocq Prover treats a parameter of a nested mutual fixpoint as uniform without examining calls between the different bodies of that fixpoint. find_uniform_parameters in kernel/inductive.ml inspects only self-recursive calls, so when no body calls itself the…

  • CVE-2026-72844MedAug 20, 2026
    risk 0.34cvss 6.3epss 0.00

    The Lean 4 kernel does not verify that the structure named in a projection expression matches the type of the value being projected, and environment::add_inductive in src/kernel/inductive.cpp did not type check the nested inductive applications that are replaced by auxiliary…