Skip to content
Security
فارسی
Sign in / Register
Vulnerabilities
Products
Plugins
All products
github.com/lf-edge/ekuiper/v2
Go
· Package
9 reports
Vulnerability alerts
Follow
Package, identifier or title
Search
Severity
All
Critical
High
Medium
Low
Unknown
Fix status
All
Fix reported
No fix reported
Sort by
Recently updated
Highest severity
Report
Product
Ecosystem
Severity
Fix status
Last updated
LF Edge eKuiper: Self-XSS in External Service Creation
CVE-2025-24978 · GHSA-G8RH-FJM6-H2H9
Version ranges need review.
github.com/lf-edge/ekuiper/v2
github.com/lf-edge/ekuiper
Go
Low
Fix reported
2026-09-17
LF Edge eKuiper: Arbitrary File and Directory Deletion via Path Traversal in Plugin Installation Endpoint
CVE-2025-58363 · GHSA-C23Q-FW86-9H5X
Version ranges need review.
github.com/lf-edge/ekuiper/v2
github.com/lf-edge/ekuiper
Go
Medium
Fix reported
2026-09-17
LF Edge eKuiper: SSRF in External Service
CVE-2025-24979 · GHSA-PQQC-8V73-9GG2
Version ranges need review.
github.com/lf-edge/ekuiper/v2
github.com/lf-edge/ekuiper
Go
Medium
Fix reported
2026-09-17
LF Edge eKuiper Vulnerable to Stored XSS in Configuration Key Functionality
CVE-2024-52290 · GHSA-9CWV-PXCR-HFJC
Version ranges need review.
github.com/lf-edge/ekuiper/v2
github.com/lf-edge/ekuiper
Go
Medium
Fix reported
2026-09-10
eKuiper API endpoints handling SQL queries with user-controlled table names.
CVE-2025-54379 · GHSA-526J-MV3P-F4VV
Version ranges need review.
github.com/lf-edge/ekuiper/v2
github.com/lf-edge/ekuiper
Go
PyPI
High
Fix reported
2026-09-10
LF Edge eKuiper is vulnerable to Arbitrary File Read/Write via unsanitized names and zip extraction
GHSA-RJ4J-2JPH-GG43 · GO-2025-4158
Version ranges need review.
github.com/lf-edge/ekuiper/v2
github.com/lf-edge/ekuiper
Go
Critical
Fix reported
2026-03-03
eKuiper /config/uploads API arbitrary file writing may lead to RCE
GHSA-GJ54-GWJ9-X2C6 · GO-2025-3800
Version ranges need review.
github.com/lf-edge/ekuiper/v2
github.com/lf-edge/ekuiper
Go
High
Fix reported
2026-03-03
LF Edge eKuiper vulnerable to File Path Traversal leading to file replacement
GHSA-FV2P-QJ5P-WQQ4 · GO-2025-3799
Version ranges need review.
github.com/lf-edge/ekuiper/v2
github.com/lf-edge/ekuiper
Go
High
Fix reported
2026-03-03
LF Edge eKuiper allows Stored XSS in Rules Functionality
CVE-2024-52812 · GHSA-6HRW-X7PR-4MP8
Version ranges need review.
github.com/lf-edge/ekuiper/v2
github.com/lf-edge/ekuiper
Go
Medium
Fix reported
2026-03-03
