Skip to content
OpenAdvisories

Package · Go

github.com/lf-edge/ekuiper/v2

9 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical —
    GHSA-rj4j-2jph-gg43

    LF Edge eKuiper is vulnerable to Arbitrary File Read/Write via unsanitized names and zip extraction

    ### Summary Multiple path traversal and unsafe path handling vulnerabilities were discovered in eKuiper prior to the fixes implemented in PR [lf-edge/ekuiper#3911](https://github.com/lf-edge/ekuiper/pull/3911). The issues allow attacker-controlled input (rule…

    github.com/lf-edge/ekuiper github.com/lf-edge/ekuiper/v2 Go