Skip to content
OpenAdvisories

Vendor

lf-edge

4 known vulnerabilities.

Products

ekuiper 4
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.9
    CVE-2025-54379

    eKuiper API endpoints handling SQL queries with user-controlled table names.

    LF Edge eKuiper is a lightweight IoT data analytics and stream processing engine running on resource-constraint edge devices. In versions before 2.2.1, there is a critical SQL Injection vulnerability in the getLast API functionality of the eKuiper project. Th…

    lf-edge ekuiper github.com/lf-edge/ekuiper github.com/lf-edge/ekuiper/v2 PyPI Go
  • High 8.8
    CVE-2024-43406

    LF Edge eKuiper has a SQL Injection in sqlKvStore

    LF Edge eKuiper is a lightweight IoT data analytics and stream processing engine running on resource-constraint edge devices. A user could utilize and exploit SQL Injection to allow the execution of malicious SQL query via Get method in sqlKvStore. This vulne…

    lf-edge ekuiper github.com/lf-edge/ekuiper ekuiper PyPI Go