lean4 vulnerabilities

CVEs whose affected-version data names the lean4 package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-72711Medium· 6.3PoC

1mo ago

The Lean 4 kernel does not check that the body of an opaque declaration is closed

The Lean 4 kernel does not check that the body of an opaque declaration is closed. environment::add_opaque omits the check_no_metavar_no_fvar call that the definition and theorem paths perform, so a value containing a free variable that …

▾ Twilightleanprover · lean4EPSS 0.18%via NVD