lf-edge/ekuiper Security Advisories | GitStock

medium2026-09-09

LF Edge eKuiper: Arbitrary File and Directory Deletion via Path Traversal in Plugin Installation Endpoint

GHSA-c23q-fw86-9h5x · CVE-2025-58363

medium2026-09-09

LF Edge eKuiper: SSRF in External Service

GHSA-pqqc-8v73-9gg2 · CVE-2025-24979

low2026-09-09

LF Edge eKuiper: Self-XSS in External Service Creation

GHSA-g8rh-fjm6-h2h9 · CVE-2025-24978

critical2025-11-24

LF Edge eKuiper is vulnerable to Arbitrary File Read/Write via unsanitized names and zip extraction

GHSA-rj4j-2jph-gg43

high2025-07-24

eKuiper API endpoints handling SQL queries with user-controlled table names.

GHSA-526j-mv3p-f4vv · CVE-2025-54379

high2025-07-03

eKuiper /config/uploads API arbitrary file writing may lead to RCE

GHSA-gj54-gwj9-x2c6

high2025-07-03

LF Edge eKuiper vulnerable to File Path Traversal leading to file replacement

GHSA-fv2p-qj5p-wqq4

medium2025-05-14

LF Edge eKuiper Vulnerable to Stored XSS in Configuration Key Functionality

GHSA-9cwv-pxcr-hfjc · CVE-2024-52290

medium2025-03-10

LF Edge eKuiper allows Stored XSS in Rules Functionality

GHSA-6hrw-x7pr-4mp8 · CVE-2024-52812

high2024-08-20

LF Edge eKuiper has a SQL Injection in sqlKvStore

GHSA-r5ph-4jxm-6j9p · CVE-2024-43406