CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 24/11/2025 |
| GO-2025-3800 | eKuiper /config/uploads API arbitrary file writing may lead to RCE in github.com/lf-edge/ekuiper | 28/07/2025 |
| GO-2025-3799 | LF Edge eKuiper vulnerable to File Path Traversal leading to file replacement in github.com/lf-edge/ekuiper | 28/07/2025 |
| CVE-2025-54379 | CRITICAL9.8 | LF Edge eKuiper is a lightweight IoT data analytics and stream processing engine running on resource-constraint edge devices. In versions before 2.2.1, there is a critical SQL Injection vulnerability in the getLast API functionality of the eKuiper project. This flaw allows unauthenticated remote attackers to execute ar | 24/07/2025 |
| GHSA-gj54-gwj9-x2c6 | HIGH | eKuiper /config/uploads API arbitrary file writing may lead to RCE | 03/07/2025 |
| GHSA-fv2p-qj5p-wqq4 | HIGH8.5 | LF Edge eKuiper vulnerable to File Path Traversal leading to file replacement | 03/07/2025 |
| CVE-2024-52290 | MEDIUM5.4 | LF Edge eKuiper is a lightweight internet of things (IoT) data analytics and stream processing engine. Prior to version 2.1.0 user with rights to modificate the service (e.g. kuiperUser role) can inject a cross-site scripting payload into Connection Configuration key `Name` (`confKey`) parameter. After this setup, when | 14/05/2025 |
| CVE-2024-52812 | MEDIUM5.4 | LF Edge eKuiper is an internet-of-things data analytics and stream processing engine. Prior to version 2.0.8, auser with rights to modify the service (e.g. kuiperUser role) can inject a cross-site scripting payload into the rule `id` parameter. Then, after any user with access to this service (e.g. admin) tries make an | 10/03/2025 |