xsql

Aug 6, 2026

Changes in this version

+ type AggregateMultiValuer struct

+ func (a *AggregateMultiValuer) AliasValue(key string) (interface{}, bool)

+ func (a *AggregateMultiValuer) AppendAlias(key string, value interface{}) bool

+ func (a *AggregateMultiValuer) Call(name string, funcId int, args []interface{}) (interface{}, bool)

+ func (a *AggregateMultiValuer) GetAllTuples() AggregateData

+ func (a *AggregateMultiValuer) GetSingleCallValuer() CallValuer

+ func (a *AggregateMultiValuer) Reset(data AggregateData, singleCallValuer CallValuer)

+ type MultiValuerList []Valuer

+ func (a MultiValuerList) AliasValue(key string) (interface{}, bool)

+ func (a MultiValuerList) AppendAlias(key string, value interface{}) bool

+ func (a MultiValuerList) Call(name string, funcId int, args []interface{}) (interface{}, bool)

+ func (a MultiValuerList) FuncValue(key string) (interface{}, bool)

+ func (a MultiValuerList) Meta(key, table string) (interface{}, bool)

+ func (a MultiValuerList) SetByIndex(index int, value any)

+ func (a MultiValuerList) SetTempByIndex(index int, value any)

+ func (a MultiValuerList) TempByIndex(index int) any

+ func (a MultiValuerList) Value(key, table string) (interface{}, bool)

+ func (a MultiValuerList) ValueByIndex(index int, sourceIndex int) (any, bool)

May 19, 2026 GO-2026-6445

  GO-2026-6445: LF Edge eKuiper: Arbitrary File and Directory Deletion via Path Traversal in Plugin Installation Endpoint in github.com/lf-edge/ekuiper

Changes in this version

type RawTuple

+ func (r *RawTuple) Clone() *RawTuple

type StreamInfo

+ Temp bool

May 19, 2026 GO-2026-6445 +2 more

  GO-2026-6445: LF Edge eKuiper: Arbitrary File and Directory Deletion via Path Traversal in Plugin Installation Endpoint in github.com/lf-edge/ekuiper

  GO-2026-6446: LF Edge eKuiper: Self-XSS in External Service Creation in github.com/lf-edge/ekuiper

  GO-2026-6447: LF Edge eKuiper: SSRF in External Service in github.com/lf-edge/ekuiper

May 13, 2026 GO-2026-6445 +2 more

  GO-2026-6445: LF Edge eKuiper: Arbitrary File and Directory Deletion via Path Traversal in Plugin Installation Endpoint in github.com/lf-edge/ekuiper

  GO-2026-6446: LF Edge eKuiper: Self-XSS in External Service Creation in github.com/lf-edge/ekuiper

  GO-2026-6447: LF Edge eKuiper: SSRF in External Service in github.com/lf-edge/ekuiper

May 11, 2026 GO-2026-6445 +2 more

  GO-2026-6445: LF Edge eKuiper: Arbitrary File and Directory Deletion via Path Traversal in Plugin Installation Endpoint in github.com/lf-edge/ekuiper

  GO-2026-6446: LF Edge eKuiper: Self-XSS in External Service Creation in github.com/lf-edge/ekuiper

  GO-2026-6447: LF Edge eKuiper: SSRF in External Service in github.com/lf-edge/ekuiper

Apr 24, 2026 GO-2026-6445 +2 more

  GO-2026-6445: LF Edge eKuiper: Arbitrary File and Directory Deletion via Path Traversal in Plugin Installation Endpoint in github.com/lf-edge/ekuiper

  GO-2026-6446: LF Edge eKuiper: Self-XSS in External Service Creation in github.com/lf-edge/ekuiper

  GO-2026-6447: LF Edge eKuiper: SSRF in External Service in github.com/lf-edge/ekuiper

Mar 23, 2026 GO-2026-6445 +2 more

  GO-2026-6445: LF Edge eKuiper: Arbitrary File and Directory Deletion via Path Traversal in Plugin Installation Endpoint in github.com/lf-edge/ekuiper

  GO-2026-6446: LF Edge eKuiper: Self-XSS in External Service Creation in github.com/lf-edge/ekuiper

  GO-2026-6447: LF Edge eKuiper: SSRF in External Service in github.com/lf-edge/ekuiper

Mar 20, 2026 GO-2026-6445 +2 more

  GO-2026-6445: LF Edge eKuiper: Arbitrary File and Directory Deletion via Path Traversal in Plugin Installation Endpoint in github.com/lf-edge/ekuiper

  GO-2026-6446: LF Edge eKuiper: Self-XSS in External Service Creation in github.com/lf-edge/ekuiper

  GO-2026-6447: LF Edge eKuiper: SSRF in External Service in github.com/lf-edge/ekuiper

Mar 5, 2026 GO-2026-6445 +2 more

  GO-2026-6445: LF Edge eKuiper: Arbitrary File and Directory Deletion via Path Traversal in Plugin Installation Endpoint in github.com/lf-edge/ekuiper

  GO-2026-6446: LF Edge eKuiper: Self-XSS in External Service Creation in github.com/lf-edge/ekuiper

  GO-2026-6447: LF Edge eKuiper: SSRF in External Service in github.com/lf-edge/ekuiper

Feb 2, 2026 GO-2026-6445 +2 more

  GO-2026-6445: LF Edge eKuiper: Arbitrary File and Directory Deletion via Path Traversal in Plugin Installation Endpoint in github.com/lf-edge/ekuiper

  GO-2026-6446: LF Edge eKuiper: Self-XSS in External Service Creation in github.com/lf-edge/ekuiper

  GO-2026-6447: LF Edge eKuiper: SSRF in External Service in github.com/lf-edge/ekuiper

Jan 30, 2026 GO-2026-6445 +2 more

  GO-2026-6445: LF Edge eKuiper: Arbitrary File and Directory Deletion via Path Traversal in Plugin Installation Endpoint in github.com/lf-edge/ekuiper

  GO-2026-6446: LF Edge eKuiper: Self-XSS in External Service Creation in github.com/lf-edge/ekuiper

  GO-2026-6447: LF Edge eKuiper: SSRF in External Service in github.com/lf-edge/ekuiper

Jan 28, 2026 GO-2026-6445 +2 more

  GO-2026-6445: LF Edge eKuiper: Arbitrary File and Directory Deletion via Path Traversal in Plugin Installation Endpoint in github.com/lf-edge/ekuiper

  GO-2026-6446: LF Edge eKuiper: Self-XSS in External Service Creation in github.com/lf-edge/ekuiper

  GO-2026-6447: LF Edge eKuiper: SSRF in External Service in github.com/lf-edge/ekuiper

Jan 14, 2026 GO-2026-6445 +2 more

  GO-2026-6445: LF Edge eKuiper: Arbitrary File and Directory Deletion via Path Traversal in Plugin Installation Endpoint in github.com/lf-edge/ekuiper

  GO-2026-6446: LF Edge eKuiper: Self-XSS in External Service Creation in github.com/lf-edge/ekuiper

  GO-2026-6447: LF Edge eKuiper: SSRF in External Service in github.com/lf-edge/ekuiper

Dec 17, 2025 GO-2026-6445 +2 more

  GO-2026-6445: LF Edge eKuiper: Arbitrary File and Directory Deletion via Path Traversal in Plugin Installation Endpoint in github.com/lf-edge/ekuiper

  GO-2026-6446: LF Edge eKuiper: Self-XSS in External Service Creation in github.com/lf-edge/ekuiper

  GO-2026-6447: LF Edge eKuiper: SSRF in External Service in github.com/lf-edge/ekuiper

Oct 31, 2025 GO-2026-6445 +2 more

  GO-2026-6445: LF Edge eKuiper: Arbitrary File and Directory Deletion via Path Traversal in Plugin Installation Endpoint in github.com/lf-edge/ekuiper

  GO-2026-6446: LF Edge eKuiper: Self-XSS in External Service Creation in github.com/lf-edge/ekuiper

  GO-2026-6447: LF Edge eKuiper: SSRF in External Service in github.com/lf-edge/ekuiper

Nov 21, 2025 GO-2026-6445 +2 more

  GO-2026-6445: LF Edge eKuiper: Arbitrary File and Directory Deletion via Path Traversal in Plugin Installation Endpoint in github.com/lf-edge/ekuiper

  GO-2026-6446: LF Edge eKuiper: Self-XSS in External Service Creation in github.com/lf-edge/ekuiper

  GO-2026-6447: LF Edge eKuiper: SSRF in External Service in github.com/lf-edge/ekuiper

Oct 24, 2025 GO-2026-6445 +2 more

  GO-2026-6445: LF Edge eKuiper: Arbitrary File and Directory Deletion via Path Traversal in Plugin Installation Endpoint in github.com/lf-edge/ekuiper

  GO-2026-6446: LF Edge eKuiper: Self-XSS in External Service Creation in github.com/lf-edge/ekuiper

  GO-2026-6447: LF Edge eKuiper: SSRF in External Service in github.com/lf-edge/ekuiper

Changes in this version

+ type EventRow interface

+ type SliceTuple struct

+ Props map[string]string

+ SinkContent model.SliceVal

+ SourceContent model.SliceVal

+ TempCalContent model.SliceVal

+ Timestamp time.Time

+ func (s *SliceTuple) AliasValue(name string) (any, bool)

+ func (s *SliceTuple) All(_ string) (map[string]any, bool)

+ func (s *SliceTuple) AllProps() map[string]string

+ func (s *SliceTuple) AppendAlias(key string, value any) bool

+ func (s *SliceTuple) Clone() Row

+ func (s *SliceTuple) Compact(len int)

+ func (s *SliceTuple) Del(_ string)

+ func (s *SliceTuple) DynamicProps(template string) (string, bool)

+ func (s *SliceTuple) FuncValue(key string) (any, bool)

+ func (s *SliceTuple) GetTimestamp() time.Time

+ func (s *SliceTuple) GetTracerCtx() api.StreamContext

+ func (s *SliceTuple) IsWatermark() bool

+ func (s *SliceTuple) Meta(key, table string) (any, bool)

+ func (s *SliceTuple) Pick(allWildcard bool, cols [][]string, wildcardEmitters map[string]bool, ...)

+ func (s *SliceTuple) Set(col string, value any)

+ func (s *SliceTuple) SetByIndex(index int, value any)

+ func (s *SliceTuple) SetTempByIndex(index int, value any)

+ func (s *SliceTuple) SetTracerCtx(ctx api.StreamContext)

+ func (s *SliceTuple) TempByIndex(index int) any

+ func (s *SliceTuple) ToMap() map[string]any

+ func (s *SliceTuple) Value(key, _ string) (any, bool)

+ func (s *SliceTuple) ValueByIndex(index, sourceIndex int) (any, bool)

Oct 21, 2025 GO-2025-4158 +3 more

  GO-2025-4158: LF Edge eKuiper is vulnerable to Arbitrary File Read/Write via unsanitized names and zip extraction in github.com/lf-edge/ekuiper

  GO-2026-6445: LF Edge eKuiper: Arbitrary File and Directory Deletion via Path Traversal in Plugin Installation Endpoint in github.com/lf-edge/ekuiper

  GO-2026-6446: LF Edge eKuiper: Self-XSS in External Service Creation in github.com/lf-edge/ekuiper

  GO-2026-6447: LF Edge eKuiper: SSRF in External Service in github.com/lf-edge/ekuiper

Oct 16, 2025 GO-2025-4158 +3 more

  GO-2025-4158: LF Edge eKuiper is vulnerable to Arbitrary File Read/Write via unsanitized names and zip extraction in github.com/lf-edge/ekuiper

  GO-2026-6445: LF Edge eKuiper: Arbitrary File and Directory Deletion via Path Traversal in Plugin Installation Endpoint in github.com/lf-edge/ekuiper

  GO-2026-6446: LF Edge eKuiper: Self-XSS in External Service Creation in github.com/lf-edge/ekuiper

  GO-2026-6447: LF Edge eKuiper: SSRF in External Service in github.com/lf-edge/ekuiper

Sep 23, 2025 GO-2025-4158 +3 more

  GO-2025-4158: LF Edge eKuiper is vulnerable to Arbitrary File Read/Write via unsanitized names and zip extraction in github.com/lf-edge/ekuiper

  GO-2026-6445: LF Edge eKuiper: Arbitrary File and Directory Deletion via Path Traversal in Plugin Installation Endpoint in github.com/lf-edge/ekuiper

  GO-2026-6446: LF Edge eKuiper: Self-XSS in External Service Creation in github.com/lf-edge/ekuiper

  GO-2026-6447: LF Edge eKuiper: SSRF in External Service in github.com/lf-edge/ekuiper

Sep 17, 2025 GO-2025-4158 +3 more

  GO-2025-4158: LF Edge eKuiper is vulnerable to Arbitrary File Read/Write via unsanitized names and zip extraction in github.com/lf-edge/ekuiper

  GO-2026-6445: LF Edge eKuiper: Arbitrary File and Directory Deletion via Path Traversal in Plugin Installation Endpoint in github.com/lf-edge/ekuiper

  GO-2026-6446: LF Edge eKuiper: Self-XSS in External Service Creation in github.com/lf-edge/ekuiper

  GO-2026-6447: LF Edge eKuiper: SSRF in External Service in github.com/lf-edge/ekuiper

Aug 25, 2025 GO-2025-4158 +3 more

  GO-2025-4158: LF Edge eKuiper is vulnerable to Arbitrary File Read/Write via unsanitized names and zip extraction in github.com/lf-edge/ekuiper

  GO-2026-6445: LF Edge eKuiper: Arbitrary File and Directory Deletion via Path Traversal in Plugin Installation Endpoint in github.com/lf-edge/ekuiper

  GO-2026-6446: LF Edge eKuiper: Self-XSS in External Service Creation in github.com/lf-edge/ekuiper

  GO-2026-6447: LF Edge eKuiper: SSRF in External Service in github.com/lf-edge/ekuiper

Aug 12, 2025 GO-2025-4158 +3 more

  GO-2025-4158: LF Edge eKuiper is vulnerable to Arbitrary File Read/Write via unsanitized names and zip extraction in github.com/lf-edge/ekuiper

  GO-2026-6445: LF Edge eKuiper: Arbitrary File and Directory Deletion via Path Traversal in Plugin Installation Endpoint in github.com/lf-edge/ekuiper

  GO-2026-6446: LF Edge eKuiper: Self-XSS in External Service Creation in github.com/lf-edge/ekuiper

  GO-2026-6447: LF Edge eKuiper: SSRF in External Service in github.com/lf-edge/ekuiper

Aug 8, 2025 GO-2025-4158 +3 more

  GO-2025-4158: LF Edge eKuiper is vulnerable to Arbitrary File Read/Write via unsanitized names and zip extraction in github.com/lf-edge/ekuiper

  GO-2026-6445: LF Edge eKuiper: Arbitrary File and Directory Deletion via Path Traversal in Plugin Installation Endpoint in github.com/lf-edge/ekuiper

  GO-2026-6446: LF Edge eKuiper: Self-XSS in External Service Creation in github.com/lf-edge/ekuiper

  GO-2026-6447: LF Edge eKuiper: SSRF in External Service in github.com/lf-edge/ekuiper

Sep 18, 2026 GO-2025-4158 +3 more

  GO-2025-4158: LF Edge eKuiper is vulnerable to Arbitrary File Read/Write via unsanitized names and zip extraction in github.com/lf-edge/ekuiper

  GO-2026-6445: LF Edge eKuiper: Arbitrary File and Directory Deletion via Path Traversal in Plugin Installation Endpoint in github.com/lf-edge/ekuiper

  GO-2026-6446: LF Edge eKuiper: Self-XSS in External Service Creation in github.com/lf-edge/ekuiper

  GO-2026-6447: LF Edge eKuiper: SSRF in External Service in github.com/lf-edge/ekuiper

Sep 17, 2026 GO-2025-4158 +3 more

  GO-2025-4158: LF Edge eKuiper is vulnerable to Arbitrary File Read/Write via unsanitized names and zip extraction in github.com/lf-edge/ekuiper

  GO-2026-6445: LF Edge eKuiper: Arbitrary File and Directory Deletion via Path Traversal in Plugin Installation Endpoint in github.com/lf-edge/ekuiper

  GO-2026-6446: LF Edge eKuiper: Self-XSS in External Service Creation in github.com/lf-edge/ekuiper

  GO-2026-6447: LF Edge eKuiper: SSRF in External Service in github.com/lf-edge/ekuiper

Sep 10, 2026 GO-2025-4158 +3 more

  GO-2025-4158: LF Edge eKuiper is vulnerable to Arbitrary File Read/Write via unsanitized names and zip extraction in github.com/lf-edge/ekuiper

  GO-2026-6445: LF Edge eKuiper: Arbitrary File and Directory Deletion via Path Traversal in Plugin Installation Endpoint in github.com/lf-edge/ekuiper

  GO-2026-6446: LF Edge eKuiper: Self-XSS in External Service Creation in github.com/lf-edge/ekuiper

  GO-2026-6447: LF Edge eKuiper: SSRF in External Service in github.com/lf-edge/ekuiper

Apr 27, 2026 GO-2025-4158 +3 more

  GO-2025-4158: LF Edge eKuiper is vulnerable to Arbitrary File Read/Write via unsanitized names and zip extraction in github.com/lf-edge/ekuiper

  GO-2026-6445: LF Edge eKuiper: Arbitrary File and Directory Deletion via Path Traversal in Plugin Installation Endpoint in github.com/lf-edge/ekuiper

  GO-2026-6446: LF Edge eKuiper: Self-XSS in External Service Creation in github.com/lf-edge/ekuiper

  GO-2026-6447: LF Edge eKuiper: SSRF in External Service in github.com/lf-edge/ekuiper

Apr 20, 2026 GO-2025-4158 +3 more

  GO-2025-4158: LF Edge eKuiper is vulnerable to Arbitrary File Read/Write via unsanitized names and zip extraction in github.com/lf-edge/ekuiper

  GO-2026-6445: LF Edge eKuiper: Arbitrary File and Directory Deletion via Path Traversal in Plugin Installation Endpoint in github.com/lf-edge/ekuiper

  GO-2026-6446: LF Edge eKuiper: Self-XSS in External Service Creation in github.com/lf-edge/ekuiper

  GO-2026-6447: LF Edge eKuiper: SSRF in External Service in github.com/lf-edge/ekuiper

Sep 23, 2025 GO-2025-4158 +3 more

  GO-2025-4158: LF Edge eKuiper is vulnerable to Arbitrary File Read/Write via unsanitized names and zip extraction in github.com/lf-edge/ekuiper

  GO-2026-6445: LF Edge eKuiper: Arbitrary File and Directory Deletion via Path Traversal in Plugin Installation Endpoint in github.com/lf-edge/ekuiper

  GO-2026-6446: LF Edge eKuiper: Self-XSS in External Service Creation in github.com/lf-edge/ekuiper

  GO-2026-6447: LF Edge eKuiper: SSRF in External Service in github.com/lf-edge/ekuiper

Sep 3, 2025 GO-2025-4158 +3 more

  GO-2025-4158: LF Edge eKuiper is vulnerable to Arbitrary File Read/Write via unsanitized names and zip extraction in github.com/lf-edge/ekuiper

  GO-2026-6445: LF Edge eKuiper: Arbitrary File and Directory Deletion via Path Traversal in Plugin Installation Endpoint in github.com/lf-edge/ekuiper

  GO-2026-6446: LF Edge eKuiper: Self-XSS in External Service Creation in github.com/lf-edge/ekuiper

  GO-2026-6447: LF Edge eKuiper: SSRF in External Service in github.com/lf-edge/ekuiper

Jul 22, 2025 GO-2025-4158 +3 more

  GO-2025-4158: LF Edge eKuiper is vulnerable to Arbitrary File Read/Write via unsanitized names and zip extraction in github.com/lf-edge/ekuiper

  GO-2026-6445: LF Edge eKuiper: Arbitrary File and Directory Deletion via Path Traversal in Plugin Installation Endpoint in github.com/lf-edge/ekuiper

  GO-2026-6446: LF Edge eKuiper: Self-XSS in External Service Creation in github.com/lf-edge/ekuiper

  GO-2026-6447: LF Edge eKuiper: SSRF in External Service in github.com/lf-edge/ekuiper

Jul 2, 2025 GO-2025-3827 +4 more

  GO-2025-3827: eKuiper API endpoints handling SQL queries with user-controlled table names. in github.com/lf-edge/ekuiper

  GO-2025-4158: LF Edge eKuiper is vulnerable to Arbitrary File Read/Write via unsanitized names and zip extraction in github.com/lf-edge/ekuiper

  GO-2026-6445: LF Edge eKuiper: Arbitrary File and Directory Deletion via Path Traversal in Plugin Installation Endpoint in github.com/lf-edge/ekuiper

  GO-2026-6446: LF Edge eKuiper: Self-XSS in External Service Creation in github.com/lf-edge/ekuiper

  GO-2026-6447: LF Edge eKuiper: SSRF in External Service in github.com/lf-edge/ekuiper

Changes in this version

+ func GetId(val any) any

+ type BatchEOFTuple time.Time

type ValuerEval

+ func (v *ValuerEval) SimpleDataEval(lhs, rhs any, op ast.Token) any

Jun 25, 2025 GO-2025-3799 +6 more

  GO-2025-3799: LF Edge eKuiper vulnerable to File Path Traversal leading to file replacement in github.com/lf-edge/ekuiper

  GO-2025-3800: eKuiper /config/uploads API arbitrary file writing may lead to RCE in github.com/lf-edge/ekuiper

  GO-2025-3827: eKuiper API endpoints handling SQL queries with user-controlled table names. in github.com/lf-edge/ekuiper

  GO-2025-4158: LF Edge eKuiper is vulnerable to Arbitrary File Read/Write via unsanitized names and zip extraction in github.com/lf-edge/ekuiper

  GO-2026-6445: LF Edge eKuiper: Arbitrary File and Directory Deletion via Path Traversal in Plugin Installation Endpoint in github.com/lf-edge/ekuiper

  GO-2026-6446: LF Edge eKuiper: Self-XSS in External Service Creation in github.com/lf-edge/ekuiper

  GO-2026-6447: LF Edge eKuiper: SSRF in External Service in github.com/lf-edge/ekuiper

Jun 4, 2025 GO-2025-3799 +6 more

  GO-2025-3799: LF Edge eKuiper vulnerable to File Path Traversal leading to file replacement in github.com/lf-edge/ekuiper

  GO-2025-3800: eKuiper /config/uploads API arbitrary file writing may lead to RCE in github.com/lf-edge/ekuiper

  GO-2025-3827: eKuiper API endpoints handling SQL queries with user-controlled table names. in github.com/lf-edge/ekuiper

  GO-2025-4158: LF Edge eKuiper is vulnerable to Arbitrary File Read/Write via unsanitized names and zip extraction in github.com/lf-edge/ekuiper

  GO-2026-6445: LF Edge eKuiper: Arbitrary File and Directory Deletion via Path Traversal in Plugin Installation Endpoint in github.com/lf-edge/ekuiper

  GO-2026-6446: LF Edge eKuiper: Self-XSS in External Service Creation in github.com/lf-edge/ekuiper

  GO-2026-6447: LF Edge eKuiper: SSRF in External Service in github.com/lf-edge/ekuiper

May 27, 2025 GO-2025-3799 +6 more

  GO-2025-3799: LF Edge eKuiper vulnerable to File Path Traversal leading to file replacement in github.com/lf-edge/ekuiper

  GO-2025-3800: eKuiper /config/uploads API arbitrary file writing may lead to RCE in github.com/lf-edge/ekuiper

  GO-2025-3827: eKuiper API endpoints handling SQL queries with user-controlled table names. in github.com/lf-edge/ekuiper

  GO-2025-4158: LF Edge eKuiper is vulnerable to Arbitrary File Read/Write via unsanitized names and zip extraction in github.com/lf-edge/ekuiper

  GO-2026-6445: LF Edge eKuiper: Arbitrary File and Directory Deletion via Path Traversal in Plugin Installation Endpoint in github.com/lf-edge/ekuiper

  GO-2026-6446: LF Edge eKuiper: Self-XSS in External Service Creation in github.com/lf-edge/ekuiper

  GO-2026-6447: LF Edge eKuiper: SSRF in External Service in github.com/lf-edge/ekuiper

Apr 24, 2025 GO-2025-3799 +6 more

  GO-2025-3799: LF Edge eKuiper vulnerable to File Path Traversal leading to file replacement in github.com/lf-edge/ekuiper

  GO-2025-3800: eKuiper /config/uploads API arbitrary file writing may lead to RCE in github.com/lf-edge/ekuiper

  GO-2025-3827: eKuiper API endpoints handling SQL queries with user-controlled table names. in github.com/lf-edge/ekuiper

  GO-2025-4158: LF Edge eKuiper is vulnerable to Arbitrary File Read/Write via unsanitized names and zip extraction in github.com/lf-edge/ekuiper

  GO-2026-6445: LF Edge eKuiper: Arbitrary File and Directory Deletion via Path Traversal in Plugin Installation Endpoint in github.com/lf-edge/ekuiper

  GO-2026-6446: LF Edge eKuiper: Self-XSS in External Service Creation in github.com/lf-edge/ekuiper

  GO-2026-6447: LF Edge eKuiper: SSRF in External Service in github.com/lf-edge/ekuiper

Apr 8, 2025 GO-2025-3799 +6 more

  GO-2025-3799: LF Edge eKuiper vulnerable to File Path Traversal leading to file replacement in github.com/lf-edge/ekuiper

  GO-2025-3800: eKuiper /config/uploads API arbitrary file writing may lead to RCE in github.com/lf-edge/ekuiper

  GO-2025-3827: eKuiper API endpoints handling SQL queries with user-controlled table names. in github.com/lf-edge/ekuiper

  GO-2025-4158: LF Edge eKuiper is vulnerable to Arbitrary File Read/Write via unsanitized names and zip extraction in github.com/lf-edge/ekuiper

  GO-2026-6445: LF Edge eKuiper: Arbitrary File and Directory Deletion via Path Traversal in Plugin Installation Endpoint in github.com/lf-edge/ekuiper

  GO-2026-6446: LF Edge eKuiper: Self-XSS in External Service Creation in github.com/lf-edge/ekuiper

  GO-2026-6447: LF Edge eKuiper: SSRF in External Service in github.com/lf-edge/ekuiper

Mar 28, 2025 GO-2025-3799 +6 more

  GO-2025-3799: LF Edge eKuiper vulnerable to File Path Traversal leading to file replacement in github.com/lf-edge/ekuiper

  GO-2025-3800: eKuiper /config/uploads API arbitrary file writing may lead to RCE in github.com/lf-edge/ekuiper

  GO-2025-3827: eKuiper API endpoints handling SQL queries with user-controlled table names. in github.com/lf-edge/ekuiper

  GO-2025-4158: LF Edge eKuiper is vulnerable to Arbitrary File Read/Write via unsanitized names and zip extraction in github.com/lf-edge/ekuiper

  GO-2026-6445: LF Edge eKuiper: Arbitrary File and Directory Deletion via Path Traversal in Plugin Installation Endpoint in github.com/lf-edge/ekuiper

  GO-2026-6446: LF Edge eKuiper: Self-XSS in External Service Creation in github.com/lf-edge/ekuiper

  GO-2026-6447: LF Edge eKuiper: SSRF in External Service in github.com/lf-edge/ekuiper

Jul 11, 2025 GO-2025-3799 +6 more

  GO-2025-3799: LF Edge eKuiper vulnerable to File Path Traversal leading to file replacement in github.com/lf-edge/ekuiper

  GO-2025-3800: eKuiper /config/uploads API arbitrary file writing may lead to RCE in github.com/lf-edge/ekuiper

  GO-2025-3827: eKuiper API endpoints handling SQL queries with user-controlled table names. in github.com/lf-edge/ekuiper

  GO-2025-4158: LF Edge eKuiper is vulnerable to Arbitrary File Read/Write via unsanitized names and zip extraction in github.com/lf-edge/ekuiper

  GO-2026-6445: LF Edge eKuiper: Arbitrary File and Directory Deletion via Path Traversal in Plugin Installation Endpoint in github.com/lf-edge/ekuiper

  GO-2026-6446: LF Edge eKuiper: Self-XSS in External Service Creation in github.com/lf-edge/ekuiper

  GO-2026-6447: LF Edge eKuiper: SSRF in External Service in github.com/lf-edge/ekuiper

May 27, 2025 GO-2025-3799 +6 more

  GO-2025-3799: LF Edge eKuiper vulnerable to File Path Traversal leading to file replacement in github.com/lf-edge/ekuiper

  GO-2025-3800: eKuiper /config/uploads API arbitrary file writing may lead to RCE in github.com/lf-edge/ekuiper

  GO-2025-3827: eKuiper API endpoints handling SQL queries with user-controlled table names. in github.com/lf-edge/ekuiper

  GO-2025-4158: LF Edge eKuiper is vulnerable to Arbitrary File Read/Write via unsanitized names and zip extraction in github.com/lf-edge/ekuiper

  GO-2026-6445: LF Edge eKuiper: Arbitrary File and Directory Deletion via Path Traversal in Plugin Installation Endpoint in github.com/lf-edge/ekuiper

  GO-2026-6446: LF Edge eKuiper: Self-XSS in External Service Creation in github.com/lf-edge/ekuiper

  GO-2026-6447: LF Edge eKuiper: SSRF in External Service in github.com/lf-edge/ekuiper

May 21, 2025 GO-2025-3799 +6 more

  GO-2025-3799: LF Edge eKuiper vulnerable to File Path Traversal leading to file replacement in github.com/lf-edge/ekuiper

  GO-2025-3800: eKuiper /config/uploads API arbitrary file writing may lead to RCE in github.com/lf-edge/ekuiper

  GO-2025-3827: eKuiper API endpoints handling SQL queries with user-controlled table names. in github.com/lf-edge/ekuiper

  GO-2025-4158: LF Edge eKuiper is vulnerable to Arbitrary File Read/Write via unsanitized names and zip extraction in github.com/lf-edge/ekuiper

  GO-2026-6445: LF Edge eKuiper: Arbitrary File and Directory Deletion via Path Traversal in Plugin Installation Endpoint in github.com/lf-edge/ekuiper

  GO-2026-6446: LF Edge eKuiper: Self-XSS in External Service Creation in github.com/lf-edge/ekuiper

  GO-2026-6447: LF Edge eKuiper: SSRF in External Service in github.com/lf-edge/ekuiper

May 14, 2025 GO-2025-3799 +6 more

  GO-2025-3799: LF Edge eKuiper vulnerable to File Path Traversal leading to file replacement in github.com/lf-edge/ekuiper

  GO-2025-3800: eKuiper /config/uploads API arbitrary file writing may lead to RCE in github.com/lf-edge/ekuiper

  GO-2025-3827: eKuiper API endpoints handling SQL queries with user-controlled table names. in github.com/lf-edge/ekuiper

  GO-2025-4158: LF Edge eKuiper is vulnerable to Arbitrary File Read/Write via unsanitized names and zip extraction in github.com/lf-edge/ekuiper

  GO-2026-6445: LF Edge eKuiper: Arbitrary File and Directory Deletion via Path Traversal in Plugin Installation Endpoint in github.com/lf-edge/ekuiper

  GO-2026-6446: LF Edge eKuiper: Self-XSS in External Service Creation in github.com/lf-edge/ekuiper

  GO-2026-6447: LF Edge eKuiper: SSRF in External Service in github.com/lf-edge/ekuiper

Apr 21, 2025 GO-2025-3799 +6 more

  GO-2025-3799: LF Edge eKuiper vulnerable to File Path Traversal leading to file replacement in github.com/lf-edge/ekuiper

  GO-2025-3800: eKuiper /config/uploads API arbitrary file writing may lead to RCE in github.com/lf-edge/ekuiper

  GO-2025-3827: eKuiper API endpoints handling SQL queries with user-controlled table names. in github.com/lf-edge/ekuiper

  GO-2025-4158: LF Edge eKuiper is vulnerable to Arbitrary File Read/Write via unsanitized names and zip extraction in github.com/lf-edge/ekuiper

  GO-2026-6445: LF Edge eKuiper: Arbitrary File and Directory Deletion via Path Traversal in Plugin Installation Endpoint in github.com/lf-edge/ekuiper

  GO-2026-6446: LF Edge eKuiper: Self-XSS in External Service Creation in github.com/lf-edge/ekuiper

  GO-2026-6447: LF Edge eKuiper: SSRF in External Service in github.com/lf-edge/ekuiper

Apr 10, 2025 GO-2025-3799 +6 more

  GO-2025-3799: LF Edge eKuiper vulnerable to File Path Traversal leading to file replacement in github.com/lf-edge/ekuiper

  GO-2025-3800: eKuiper /config/uploads API arbitrary file writing may lead to RCE in github.com/lf-edge/ekuiper

  GO-2025-3827: eKuiper API endpoints handling SQL queries with user-controlled table names. in github.com/lf-edge/ekuiper

  GO-2025-4158: LF Edge eKuiper is vulnerable to Arbitrary File Read/Write via unsanitized names and zip extraction in github.com/lf-edge/ekuiper

  GO-2026-6445: LF Edge eKuiper: Arbitrary File and Directory Deletion via Path Traversal in Plugin Installation Endpoint in github.com/lf-edge/ekuiper

  GO-2026-6446: LF Edge eKuiper: Self-XSS in External Service Creation in github.com/lf-edge/ekuiper

  GO-2026-6447: LF Edge eKuiper: SSRF in External Service in github.com/lf-edge/ekuiper

Mar 11, 2025 GO-2025-3799 +6 more

  GO-2025-3799: LF Edge eKuiper vulnerable to File Path Traversal leading to file replacement in github.com/lf-edge/ekuiper

  GO-2025-3800: eKuiper /config/uploads API arbitrary file writing may lead to RCE in github.com/lf-edge/ekuiper

  GO-2025-3827: eKuiper API endpoints handling SQL queries with user-controlled table names. in github.com/lf-edge/ekuiper

  GO-2025-4158: LF Edge eKuiper is vulnerable to Arbitrary File Read/Write via unsanitized names and zip extraction in github.com/lf-edge/ekuiper

  GO-2026-6445: LF Edge eKuiper: Arbitrary File and Directory Deletion via Path Traversal in Plugin Installation Endpoint in github.com/lf-edge/ekuiper

  GO-2026-6446: LF Edge eKuiper: Self-XSS in External Service Creation in github.com/lf-edge/ekuiper

  GO-2026-6447: LF Edge eKuiper: SSRF in External Service in github.com/lf-edge/ekuiper

Feb 24, 2025 GO-2025-3682 +7 more

  GO-2025-3682: LF Edge eKuiper Vulnerable to Stored XSS in Configuration Key Functionality in github.com/lf-edge/ekuiper

  GO-2025-3799: LF Edge eKuiper vulnerable to File Path Traversal leading to file replacement in github.com/lf-edge/ekuiper

  GO-2025-3800: eKuiper /config/uploads API arbitrary file writing may lead to RCE in github.com/lf-edge/ekuiper

  GO-2025-3827: eKuiper API endpoints handling SQL queries with user-controlled table names. in github.com/lf-edge/ekuiper

  GO-2025-4158: LF Edge eKuiper is vulnerable to Arbitrary File Read/Write via unsanitized names and zip extraction in github.com/lf-edge/ekuiper

  GO-2026-6445: LF Edge eKuiper: Arbitrary File and Directory Deletion via Path Traversal in Plugin Installation Endpoint in github.com/lf-edge/ekuiper

  GO-2026-6446: LF Edge eKuiper: Self-XSS in External Service Creation in github.com/lf-edge/ekuiper

  GO-2026-6447: LF Edge eKuiper: SSRF in External Service in github.com/lf-edge/ekuiper

Feb 20, 2025 GO-2025-3682 +7 more

  GO-2025-3682: LF Edge eKuiper Vulnerable to Stored XSS in Configuration Key Functionality in github.com/lf-edge/ekuiper

  GO-2025-3799: LF Edge eKuiper vulnerable to File Path Traversal leading to file replacement in github.com/lf-edge/ekuiper

  GO-2025-3800: eKuiper /config/uploads API arbitrary file writing may lead to RCE in github.com/lf-edge/ekuiper

  GO-2025-3827: eKuiper API endpoints handling SQL queries with user-controlled table names. in github.com/lf-edge/ekuiper

  GO-2025-4158: LF Edge eKuiper is vulnerable to Arbitrary File Read/Write via unsanitized names and zip extraction in github.com/lf-edge/ekuiper

  GO-2026-6445: LF Edge eKuiper: Arbitrary File and Directory Deletion via Path Traversal in Plugin Installation Endpoint in github.com/lf-edge/ekuiper

  GO-2026-6446: LF Edge eKuiper: Self-XSS in External Service Creation in github.com/lf-edge/ekuiper

  GO-2026-6447: LF Edge eKuiper: SSRF in External Service in github.com/lf-edge/ekuiper

Feb 7, 2025 GO-2025-3682 +7 more

  GO-2025-3682: LF Edge eKuiper Vulnerable to Stored XSS in Configuration Key Functionality in github.com/lf-edge/ekuiper

  GO-2025-3799: LF Edge eKuiper vulnerable to File Path Traversal leading to file replacement in github.com/lf-edge/ekuiper

  GO-2025-3800: eKuiper /config/uploads API arbitrary file writing may lead to RCE in github.com/lf-edge/ekuiper

  GO-2025-3827: eKuiper API endpoints handling SQL queries with user-controlled table names. in github.com/lf-edge/ekuiper

  GO-2025-4158: LF Edge eKuiper is vulnerable to Arbitrary File Read/Write via unsanitized names and zip extraction in github.com/lf-edge/ekuiper

  GO-2026-6445: LF Edge eKuiper: Arbitrary File and Directory Deletion via Path Traversal in Plugin Installation Endpoint in github.com/lf-edge/ekuiper

  GO-2026-6446: LF Edge eKuiper: Self-XSS in External Service Creation in github.com/lf-edge/ekuiper

  GO-2026-6447: LF Edge eKuiper: SSRF in External Service in github.com/lf-edge/ekuiper

Jan 20, 2025 GO-2025-3682 +7 more

  GO-2025-3682: LF Edge eKuiper Vulnerable to Stored XSS in Configuration Key Functionality in github.com/lf-edge/ekuiper

  GO-2025-3799: LF Edge eKuiper vulnerable to File Path Traversal leading to file replacement in github.com/lf-edge/ekuiper

  GO-2025-3800: eKuiper /config/uploads API arbitrary file writing may lead to RCE in github.com/lf-edge/ekuiper

  GO-2025-3827: eKuiper API endpoints handling SQL queries with user-controlled table names. in github.com/lf-edge/ekuiper

  GO-2025-4158: LF Edge eKuiper is vulnerable to Arbitrary File Read/Write via unsanitized names and zip extraction in github.com/lf-edge/ekuiper

  GO-2026-6445: LF Edge eKuiper: Arbitrary File and Directory Deletion via Path Traversal in Plugin Installation Endpoint in github.com/lf-edge/ekuiper

  GO-2026-6446: LF Edge eKuiper: Self-XSS in External Service Creation in github.com/lf-edge/ekuiper

  GO-2026-6447: LF Edge eKuiper: SSRF in External Service in github.com/lf-edge/ekuiper

Dec 27, 2024 GO-2025-3682 +7 more

  GO-2025-3682: LF Edge eKuiper Vulnerable to Stored XSS in Configuration Key Functionality in github.com/lf-edge/ekuiper

  GO-2025-3799: LF Edge eKuiper vulnerable to File Path Traversal leading to file replacement in github.com/lf-edge/ekuiper

  GO-2025-3800: eKuiper /config/uploads API arbitrary file writing may lead to RCE in github.com/lf-edge/ekuiper

  GO-2025-3827: eKuiper API endpoints handling SQL queries with user-controlled table names. in github.com/lf-edge/ekuiper

  GO-2025-4158: LF Edge eKuiper is vulnerable to Arbitrary File Read/Write via unsanitized names and zip extraction in github.com/lf-edge/ekuiper

  GO-2026-6445: LF Edge eKuiper: Arbitrary File and Directory Deletion via Path Traversal in Plugin Installation Endpoint in github.com/lf-edge/ekuiper

  GO-2026-6446: LF Edge eKuiper: Self-XSS in External Service Creation in github.com/lf-edge/ekuiper

  GO-2026-6447: LF Edge eKuiper: SSRF in External Service in github.com/lf-edge/ekuiper

Nov 26, 2024 GO-2025-3682 +7 more

  GO-2025-3682: LF Edge eKuiper Vulnerable to Stored XSS in Configuration Key Functionality in github.com/lf-edge/ekuiper

  GO-2025-3799: LF Edge eKuiper vulnerable to File Path Traversal leading to file replacement in github.com/lf-edge/ekuiper

  GO-2025-3800: eKuiper /config/uploads API arbitrary file writing may lead to RCE in github.com/lf-edge/ekuiper

  GO-2025-3827: eKuiper API endpoints handling SQL queries with user-controlled table names. in github.com/lf-edge/ekuiper

  GO-2025-4158: LF Edge eKuiper is vulnerable to Arbitrary File Read/Write via unsanitized names and zip extraction in github.com/lf-edge/ekuiper

  GO-2026-6445: LF Edge eKuiper: Arbitrary File and Directory Deletion via Path Traversal in Plugin Installation Endpoint in github.com/lf-edge/ekuiper

  GO-2026-6446: LF Edge eKuiper: Self-XSS in External Service Creation in github.com/lf-edge/ekuiper

  GO-2026-6447: LF Edge eKuiper: SSRF in External Service in github.com/lf-edge/ekuiper

Mar 7, 2025 GO-2025-3682 +7 more

  GO-2025-3682: LF Edge eKuiper Vulnerable to Stored XSS in Configuration Key Functionality in github.com/lf-edge/ekuiper

  GO-2025-3799: LF Edge eKuiper vulnerable to File Path Traversal leading to file replacement in github.com/lf-edge/ekuiper

  GO-2025-3800: eKuiper /config/uploads API arbitrary file writing may lead to RCE in github.com/lf-edge/ekuiper

  GO-2025-3827: eKuiper API endpoints handling SQL queries with user-controlled table names. in github.com/lf-edge/ekuiper

  GO-2025-4158: LF Edge eKuiper is vulnerable to Arbitrary File Read/Write via unsanitized names and zip extraction in github.com/lf-edge/ekuiper

  GO-2026-6445: LF Edge eKuiper: Arbitrary File and Directory Deletion via Path Traversal in Plugin Installation Endpoint in github.com/lf-edge/ekuiper

  GO-2026-6446: LF Edge eKuiper: Self-XSS in External Service Creation in github.com/lf-edge/ekuiper

  GO-2026-6447: LF Edge eKuiper: SSRF in External Service in github.com/lf-edge/ekuiper

Feb 26, 2025 GO-2025-3508 +8 more

  GO-2025-3508: LF Edge eKuiper allows Stored XSS in Rules Functionality in github.com/lf-edge/ekuiper

  GO-2025-3682: LF Edge eKuiper Vulnerable to Stored XSS in Configuration Key Functionality in github.com/lf-edge/ekuiper

  GO-2025-3799: LF Edge eKuiper vulnerable to File Path Traversal leading to file replacement in github.com/lf-edge/ekuiper

  GO-2025-3800: eKuiper /config/uploads API arbitrary file writing may lead to RCE in github.com/lf-edge/ekuiper

  GO-2025-3827: eKuiper API endpoints handling SQL queries with user-controlled table names. in github.com/lf-edge/ekuiper

  GO-2025-4158: LF Edge eKuiper is vulnerable to Arbitrary File Read/Write via unsanitized names and zip extraction in github.com/lf-edge/ekuiper

  GO-2026-6445: LF Edge eKuiper: Arbitrary File and Directory Deletion via Path Traversal in Plugin Installation Endpoint in github.com/lf-edge/ekuiper

  GO-2026-6446: LF Edge eKuiper: Self-XSS in External Service Creation in github.com/lf-edge/ekuiper

  GO-2026-6447: LF Edge eKuiper: SSRF in External Service in github.com/lf-edge/ekuiper

Dec 26, 2024 GO-2025-3508 +8 more

  GO-2025-3508: LF Edge eKuiper allows Stored XSS in Rules Functionality in github.com/lf-edge/ekuiper

  GO-2025-3682: LF Edge eKuiper Vulnerable to Stored XSS in Configuration Key Functionality in github.com/lf-edge/ekuiper

  GO-2025-3799: LF Edge eKuiper vulnerable to File Path Traversal leading to file replacement in github.com/lf-edge/ekuiper

  GO-2025-3800: eKuiper /config/uploads API arbitrary file writing may lead to RCE in github.com/lf-edge/ekuiper

  GO-2025-3827: eKuiper API endpoints handling SQL queries with user-controlled table names. in github.com/lf-edge/ekuiper

  GO-2025-4158: LF Edge eKuiper is vulnerable to Arbitrary File Read/Write via unsanitized names and zip extraction in github.com/lf-edge/ekuiper

  GO-2026-6445: LF Edge eKuiper: Arbitrary File and Directory Deletion via Path Traversal in Plugin Installation Endpoint in github.com/lf-edge/ekuiper

  GO-2026-6446: LF Edge eKuiper: Self-XSS in External Service Creation in github.com/lf-edge/ekuiper

  GO-2026-6447: LF Edge eKuiper: SSRF in External Service in github.com/lf-edge/ekuiper

Dec 24, 2024 GO-2025-3508 +8 more

  GO-2025-3508: LF Edge eKuiper allows Stored XSS in Rules Functionality in github.com/lf-edge/ekuiper

  GO-2025-3682: LF Edge eKuiper Vulnerable to Stored XSS in Configuration Key Functionality in github.com/lf-edge/ekuiper

  GO-2025-3799: LF Edge eKuiper vulnerable to File Path Traversal leading to file replacement in github.com/lf-edge/ekuiper

  GO-2025-3800: eKuiper /config/uploads API arbitrary file writing may lead to RCE in github.com/lf-edge/ekuiper

  GO-2025-3827: eKuiper API endpoints handling SQL queries with user-controlled table names. in github.com/lf-edge/ekuiper

  GO-2025-4158: LF Edge eKuiper is vulnerable to Arbitrary File Read/Write via unsanitized names and zip extraction in github.com/lf-edge/ekuiper

  GO-2026-6445: LF Edge eKuiper: Arbitrary File and Directory Deletion via Path Traversal in Plugin Installation Endpoint in github.com/lf-edge/ekuiper

  GO-2026-6446: LF Edge eKuiper: Self-XSS in External Service Creation in github.com/lf-edge/ekuiper

  GO-2026-6447: LF Edge eKuiper: SSRF in External Service in github.com/lf-edge/ekuiper

Dec 9, 2024 GO-2025-3508 +8 more

  GO-2025-3508: LF Edge eKuiper allows Stored XSS in Rules Functionality in github.com/lf-edge/ekuiper

  GO-2025-3682: LF Edge eKuiper Vulnerable to Stored XSS in Configuration Key Functionality in github.com/lf-edge/ekuiper

  GO-2025-3799: LF Edge eKuiper vulnerable to File Path Traversal leading to file replacement in github.com/lf-edge/ekuiper

  GO-2025-3800: eKuiper /config/uploads API arbitrary file writing may lead to RCE in github.com/lf-edge/ekuiper

  GO-2025-3827: eKuiper API endpoints handling SQL queries with user-controlled table names. in github.com/lf-edge/ekuiper

  GO-2025-4158: LF Edge eKuiper is vulnerable to Arbitrary File Read/Write via unsanitized names and zip extraction in github.com/lf-edge/ekuiper

  GO-2026-6445: LF Edge eKuiper: Arbitrary File and Directory Deletion via Path Traversal in Plugin Installation Endpoint in github.com/lf-edge/ekuiper

  GO-2026-6446: LF Edge eKuiper: Self-XSS in External Service Creation in github.com/lf-edge/ekuiper

  GO-2026-6447: LF Edge eKuiper: SSRF in External Service in github.com/lf-edge/ekuiper

Dec 5, 2024 GO-2025-3508 +8 more

  GO-2025-3508: LF Edge eKuiper allows Stored XSS in Rules Functionality in github.com/lf-edge/ekuiper

  GO-2025-3682: LF Edge eKuiper Vulnerable to Stored XSS in Configuration Key Functionality in github.com/lf-edge/ekuiper

  GO-2025-3799: LF Edge eKuiper vulnerable to File Path Traversal leading to file replacement in github.com/lf-edge/ekuiper

  GO-2025-3800: eKuiper /config/uploads API arbitrary file writing may lead to RCE in github.com/lf-edge/ekuiper

  GO-2025-3827: eKuiper API endpoints handling SQL queries with user-controlled table names. in github.com/lf-edge/ekuiper

  GO-2025-4158: LF Edge eKuiper is vulnerable to Arbitrary File Read/Write via unsanitized names and zip extraction in github.com/lf-edge/ekuiper

  GO-2026-6445: LF Edge eKuiper: Arbitrary File and Directory Deletion via Path Traversal in Plugin Installation Endpoint in github.com/lf-edge/ekuiper

  GO-2026-6446: LF Edge eKuiper: Self-XSS in External Service Creation in github.com/lf-edge/ekuiper

  GO-2026-6447: LF Edge eKuiper: SSRF in External Service in github.com/lf-edge/ekuiper

Nov 29, 2024 GO-2025-3508 +8 more

  GO-2025-3508: LF Edge eKuiper allows Stored XSS in Rules Functionality in github.com/lf-edge/ekuiper

  GO-2025-3682: LF Edge eKuiper Vulnerable to Stored XSS in Configuration Key Functionality in github.com/lf-edge/ekuiper

  GO-2025-3799: LF Edge eKuiper vulnerable to File Path Traversal leading to file replacement in github.com/lf-edge/ekuiper

  GO-2025-3800: eKuiper /config/uploads API arbitrary file writing may lead to RCE in github.com/lf-edge/ekuiper

  GO-2025-3827: eKuiper API endpoints handling SQL queries with user-controlled table names. in github.com/lf-edge/ekuiper

  GO-2025-4158: LF Edge eKuiper is vulnerable to Arbitrary File Read/Write via unsanitized names and zip extraction in github.com/lf-edge/ekuiper

  GO-2026-6445: LF Edge eKuiper: Arbitrary File and Directory Deletion via Path Traversal in Plugin Installation Endpoint in github.com/lf-edge/ekuiper

  GO-2026-6446: LF Edge eKuiper: Self-XSS in External Service Creation in github.com/lf-edge/ekuiper

  GO-2026-6447: LF Edge eKuiper: SSRF in External Service in github.com/lf-edge/ekuiper

Nov 22, 2024 GO-2025-3508 +8 more

  GO-2025-3508: LF Edge eKuiper allows Stored XSS in Rules Functionality in github.com/lf-edge/ekuiper

  GO-2025-3682: LF Edge eKuiper Vulnerable to Stored XSS in Configuration Key Functionality in github.com/lf-edge/ekuiper

  GO-2025-3799: LF Edge eKuiper vulnerable to File Path Traversal leading to file replacement in github.com/lf-edge/ekuiper

  GO-2025-3800: eKuiper /config/uploads API arbitrary file writing may lead to RCE in github.com/lf-edge/ekuiper

  GO-2025-3827: eKuiper API endpoints handling SQL queries with user-controlled table names. in github.com/lf-edge/ekuiper

  GO-2025-4158: LF Edge eKuiper is vulnerable to Arbitrary File Read/Write via unsanitized names and zip extraction in github.com/lf-edge/ekuiper

  GO-2026-6445: LF Edge eKuiper: Arbitrary File and Directory Deletion via Path Traversal in Plugin Installation Endpoint in github.com/lf-edge/ekuiper

  GO-2026-6446: LF Edge eKuiper: Self-XSS in External Service Creation in github.com/lf-edge/ekuiper

  GO-2026-6447: LF Edge eKuiper: SSRF in External Service in github.com/lf-edge/ekuiper

Oct 25, 2024 GO-2025-3508 +8 more

  GO-2025-3508: LF Edge eKuiper allows Stored XSS in Rules Functionality in github.com/lf-edge/ekuiper

  GO-2025-3682: LF Edge eKuiper Vulnerable to Stored XSS in Configuration Key Functionality in github.com/lf-edge/ekuiper

  GO-2025-3799: LF Edge eKuiper vulnerable to File Path Traversal leading to file replacement in github.com/lf-edge/ekuiper

  GO-2025-3800: eKuiper /config/uploads API arbitrary file writing may lead to RCE in github.com/lf-edge/ekuiper

  GO-2025-3827: eKuiper API endpoints handling SQL queries with user-controlled table names. in github.com/lf-edge/ekuiper

  GO-2025-4158: LF Edge eKuiper is vulnerable to Arbitrary File Read/Write via unsanitized names and zip extraction in github.com/lf-edge/ekuiper

  GO-2026-6445: LF Edge eKuiper: Arbitrary File and Directory Deletion via Path Traversal in Plugin Installation Endpoint in github.com/lf-edge/ekuiper

  GO-2026-6446: LF Edge eKuiper: Self-XSS in External Service Creation in github.com/lf-edge/ekuiper

  GO-2026-6447: LF Edge eKuiper: SSRF in External Service in github.com/lf-edge/ekuiper

Changes in this version

+ const DEFAULT_FIELD_NAME_PREFIX

+ const PRIVATE_PREFIX

+ var ImplicitStateFuncs = map[string]bool

+ var Language = &ParseTree

+ var WindowFuncs = map[string]struct

+ func Eval(expr ast.Expr, m Valuer) interface

+ func ExecFunc(funcName string, f api.Function, args []interface{}, fctx api.FunctionContext) (interface{}, bool)

+ func GetDataSource(m kv.KeyValue, name string) (stmt *ast.StreamStmt, err error)

+ func GetStatementFromSql(sql string) (stmt *ast.SelectStatement, err error)

+ func GetStreams(stmt *ast.SelectStatement) (result []string)

+ func HasAggFuncs(node ast.Node) bool

+ func IsAggregate(expr ast.Expr) (r bool)

+ func IsTextFormat(format string) bool

+ func NewAggregateFunctionValuers(p *funcRuntime) (*FunctionValuer, *AggregateFunctionValuer)

+ func NewFuncRuntime(ctx api.StreamContext) *funcRuntime

+ func NewFunctionValuersForOp(ctx api.StreamContext) (*FunctionValuer, *AggregateFunctionValuer)

+ func Validate(stmt *ast.SelectStatement) error

+ func WithAggFields(stmt *ast.SelectStatement) bool

+ type AffiliateRow struct

+ AliasMap map[string]interface{}

+ CalCols map[string]interface{}

+ func (d *AffiliateRow) AliasValue(key string) (interface{}, bool)

+ func (d *AffiliateRow) AppendAlias(key string, value interface{}) bool

+ func (d *AffiliateRow) Clone() AffiliateRow

+ func (d *AffiliateRow) Del(col string)

+ func (d *AffiliateRow) IsEmpty() bool

+ func (d *AffiliateRow) MergeMap(cachedMap map[string]interface{})

+ func (d *AffiliateRow) Pick(cols [][]string) [][]string

+ func (d *AffiliateRow) Set(col string, value interface{})

+ func (d *AffiliateRow) Value(key, table string) (interface{}, bool)

+ type AggregateCallValuer interface

+ GetAllTuples func() AggregateData

+ GetSingleCallValuer func() CallValuer

+ type AggregateData interface

+ AggregateEval func(expr ast.Expr, v CallValuer) []interface{}

+ type AggregateFunctionValuer struct

+ func (*AggregateFunctionValuer) AppendAlias(string, interface{}) bool

+ func (v *AggregateFunctionValuer) AliasValue(_ string) (interface{}, bool)

+ func (v *AggregateFunctionValuer) Call(name string, funcId int, args []interface{}) (interface{}, bool)

+ func (v *AggregateFunctionValuer) FuncValue(key string) (interface{}, bool)

+ func (v *AggregateFunctionValuer) GetAllTuples() AggregateData

+ func (v *AggregateFunctionValuer) GetSingleCallValuer() CallValuer

+ func (v *AggregateFunctionValuer) Meta(_, _ string) (interface{}, bool)

+ func (v *AggregateFunctionValuer) SetData(data AggregateData)

+ func (v *AggregateFunctionValuer) Value(_, _ string) (interface{}, bool)

+ type Alias struct

+ AliasMap map[string]interface{}

+ type AliasValuer interface

+ AliasValue func(name string) (interface{}, bool)

+ AppendAlias func(key string, value interface{}) bool

+ type BracketEvalResult struct

+ End int

+ Start int

+ type CallValuer interface

+ Call func(name string, funcId int, args []interface{}) (interface{}, bool)

+ type Collection interface

+ Clone func() Collection

+ Filter func(indexes []int) Collection

+ GetBySrc func(emitter string) []Row

+ GetWindowRange func() *WindowRange

+ GroupRange func(func(i int, aggRow CollectionRow) (bool, error)) error

+ Range func(func(i int, r ReadonlyRow) (bool, error)) error

+ RangeSet func(func(i int, r Row) (bool, error)) error

+ SetIsAgg func(isAgg bool)

+ ToAggMaps func() []map[string]interface{}

+ ToMaps func() []map[string]interface{}

+ ToRowMaps func() []map[string]interface{}

+ type CollectionRow interface

+ type ControlTuple interface

+ ControlType func() string

+ type EOFTuple int

+ type EmittedData interface

+ GetEmitter func() string

+ type ErrorSourceTuple struct

+ Error error

+ func (t *ErrorSourceTuple) Message() map[string]interface{}

+ func (t *ErrorSourceTuple) Meta() map[string]interface{}

+ func (t *ErrorSourceTuple) Timestamp() time.Time

+ type Event interface

+ GetTimestamp func() time.Time

+ IsWatermark func() bool

+ type FuncValuer interface

+ FuncValue func(key string) (interface{}, bool)

+ type FunctionValuer struct

+ func NewFunctionValuer(p *funcRuntime) *FunctionValuer

+ func (*FunctionValuer) AliasValue(string) (interface{}, bool)

+ func (*FunctionValuer) AppendAlias(string, interface{}) bool

+ func (*FunctionValuer) Meta(_, _ string) (interface{}, bool)

+ func (*FunctionValuer) Value(_, _ string) (interface{}, bool)

+ func (fv *FunctionValuer) Call(name string, funcId int, args []interface{}) (interface{}, bool)

+ type GroupedTuples struct

+ Content []Row

+ Ctx api.StreamContext

+ func (s *GroupedTuples) AggregateEval(expr ast.Expr, v CallValuer) []interface{}

+ func (s *GroupedTuples) All(_ string) (map[string]interface{}, bool)

+ func (s *GroupedTuples) Clone() Row

+ func (s *GroupedTuples) GetTracerCtx() api.StreamContext

+ func (s *GroupedTuples) Meta(key, table string) (interface{}, bool)

+ func (s *GroupedTuples) Pick(allWildcard bool, cols [][]string, wildcardEmitters map[string]bool, ...)

+ func (s *GroupedTuples) SetTracerCtx(ctx api.StreamContext)

+ func (s *GroupedTuples) ToMap() map[string]interface{}

+ func (s *GroupedTuples) Value(key, table string) (interface{}, bool)

+ type GroupedTuplesSet struct

+ Ctx api.StreamContext

+ Groups []*GroupedTuples

+ func (s *GroupedTuplesSet) Clone() Collection

+ func (s *GroupedTuplesSet) Filter(groups []int) Collection

+ func (s *GroupedTuplesSet) GetBySrc(_ string) []Row

+ func (s *GroupedTuplesSet) GetTracerCtx() api.StreamContext

+ func (s *GroupedTuplesSet) GetWindowRange() *WindowRange

+ func (s *GroupedTuplesSet) GroupRange(f func(i int, aggRow CollectionRow) (bool, error)) error

+ func (s *GroupedTuplesSet) Index(i int) Row

+ func (s *GroupedTuplesSet) Len() int

+ func (s *GroupedTuplesSet) Range(f func(i int, r ReadonlyRow) (bool, error)) error

+ func (s *GroupedTuplesSet) RangeOfTuples(f func(index int, tuple api.MessageTuple) bool)

+ func (s *GroupedTuplesSet) RangeSet(f func(i int, r Row) (bool, error)) error

+ func (s *GroupedTuplesSet) SetIsAgg(_ bool)

+ func (s *GroupedTuplesSet) SetTracerCtx(ctx api.StreamContext)

+ func (s *GroupedTuplesSet) Swap(i, j int)

+ func (s *GroupedTuplesSet) ToAggMaps() []map[string]any

+ func (s *GroupedTuplesSet) ToMaps() []map[string]any

+ func (s *GroupedTuplesSet) ToRowMaps() []map[string]any

+ type HasTracerCtx interface

+ GetTracerCtx func() api.StreamContext

+ SetTracerCtx func(ctx api.StreamContext)

+ type JoinTuple struct

+ Ctx api.StreamContext

+ Tuples []Row

+ func (jt *JoinTuple) AddTuple(tuple Row)

+ func (jt *JoinTuple) AddTuples(tuples []Row)

+ func (jt *JoinTuple) AggregateEval(expr ast.Expr, v CallValuer) []interface{}

+ func (jt *JoinTuple) All(stream string) (map[string]interface{}, bool)

+ func (jt *JoinTuple) Clone() Row

+ func (jt *JoinTuple) GetEmitter() string

+ func (jt *JoinTuple) GetTracerCtx() api.StreamContext

+ func (jt *JoinTuple) Meta(key, table string) (interface{}, bool)

+ func (jt *JoinTuple) Pick(allWildcard bool, cols [][]string, wildcardEmitters map[string]bool, ...)

+ func (jt *JoinTuple) SetTracerCtx(ctx api.StreamContext)

+ func (jt *JoinTuple) ToMap() map[string]interface{}

+ func (jt *JoinTuple) Value(key, table string) (interface{}, bool)

+ type JoinTuples struct

+ Content []*JoinTuple

+ Ctx api.StreamContext

+ func (s *JoinTuples) AggregateEval(expr ast.Expr, v CallValuer) []interface{}

+ func (s *JoinTuples) All(_ string) (map[string]interface{}, bool)

+ func (s *JoinTuples) Clone() Collection

+ func (s *JoinTuples) Filter(indexes []int) Collection

+ func (s *JoinTuples) GetBySrc(_ string) []Row

+ func (s *JoinTuples) GetTracerCtx() api.StreamContext

+ func (s *JoinTuples) GetWindowRange() *WindowRange

+ func (s *JoinTuples) GroupRange(f func(i int, aggRow CollectionRow) (bool, error)) error

+ func (s *JoinTuples) Index(i int) Row

+ func (s *JoinTuples) Len() int

+ func (s *JoinTuples) Meta(key, table string) (interface{}, bool)

+ func (s *JoinTuples) Pick(allWildcard bool, cols [][]string, wildcardEmitters map[string]bool, ...)

+ func (s *JoinTuples) Range(f func(i int, r ReadonlyRow) (bool, error)) error

+ func (s *JoinTuples) RangeOfTuples(f func(index int, tuple api.MessageTuple) bool)

+ func (s *JoinTuples) RangeSet(f func(i int, r Row) (bool, error)) error

+ func (s *JoinTuples) SetIsAgg(_ bool)

+ func (s *JoinTuples) SetTracerCtx(ctx api.StreamContext)

+ func (s *JoinTuples) Swap(i, j int)

+ func (s *JoinTuples) ToAggMaps() []map[string]interface{}

+ func (s *JoinTuples) ToMap() map[string]interface{}

+ func (s *JoinTuples) ToMaps() []map[string]interface{}

+ func (s *JoinTuples) ToRowMaps() []map[string]interface{}

+ func (s *JoinTuples) Value(key, table string) (interface{}, bool)

+ type Message map[string]interface

+ func (m Message) Get(key string) (value any, ok bool)

+ func (m Message) Meta(key, table string) (interface{}, bool)

+ func (m Message) Range(f func(key string, value any) bool)

+ func (m Message) ToMap() map[string]any

+ func (m Message) Value(key, _ string) (interface{}, bool)

+ func ToMessage(input interface{}) (Message, bool)

+ type MetaData interface

+ MetaData func() Metadata

+ type Metadata Message

+ func (m Metadata) Meta(key, table string) (interface{}, bool)

+ func (m Metadata) Value(key, table string) (interface{}, bool)

+ type MultiFunc interface

+ ExecWithName func(args []interface{}, ctx api.FunctionContext, name string) (interface{}, bool)

+ ValidateWithName func(args []ast.Expr, name string) error

+ type MultiSorter struct

+ Ctx api.StreamContext

+ func OrderedBy(fields ast.SortFields, fv *FunctionValuer, afv *AggregateFunctionValuer) *MultiSorter

+ func (ms *MultiSorter) GetTracerCtx() api.StreamContext

+ func (ms *MultiSorter) Less(i, j int) bool

+ func (ms *MultiSorter) SetTracerCtx(ctx api.StreamContext)

+ func (ms *MultiSorter) Sort(data SortingData) error

+ func (ms *MultiSorter) Swap(i, j int)

+ type ParseTree struct

+ Handlers map[string]func(*Parser) (ast.Statement, error)

+ Keys []string

+ Tokens map[string]*ParseTree

+ func (pt *ParseTree) Handle(lit string, fn func(*Parser) (ast.Statement, error))

+ func (pt *ParseTree) Parse(p *Parser) (ast.Statement, error)

+ type Parser struct

+ func NewParser(r io.Reader) *Parser

+ func NewParserWithSources(r io.Reader, sources []string) *Parser

+ func (p *Parser) ConvertToWindows(wtype ast.WindowType, args []ast.Expr) (*ast.Window, error)

+ func (p *Parser) Parse() (*ast.SelectStatement, error)

+ func (p *Parser) ParseCondition() (ast.Expr, error)

+ func (p *Parser) ParseCreateStmt() (ast.Statement, error)

+ func (p *Parser) ParseExpr() (ast.Expr, error)

+ func (p *Parser) ParseJoin(joinType ast.JoinType) (*ast.Join, error)

+ func (p *Parser) ParseLimit() (ast.Expr, error)

+ func (p *Parser) ParseOver4Window() (ast.Expr, error)

+ func (p *Parser) ParseQueries() ([]ast.SelectStatement, error)

+ type RawRow interface

+ Del func(col string)

+ Pick func(allWildcard bool, cols [][]string, wildcardEmitters map[string]bool, ...)

+ Set func(col string, value interface{})

+ ToMap func() map[string]interface{}

+ type RawTuple struct

+ Ctx api.StreamContext

+ Emitter string

+ Metadata Metadata

+ Props map[string]string

+ Rawdata []byte

+ Timestamp time.Time

+ func (r *RawTuple) AllProps() map[string]string

+ func (r *RawTuple) DynamicProps(template string) (string, bool)

+ func (r *RawTuple) GetTracerCtx() api.StreamContext

+ func (r *RawTuple) Meta(key, table string) (any, bool)

+ func (r *RawTuple) Raw() []byte

+ func (r *RawTuple) Replace(new []byte)

+ func (r *RawTuple) SetTracerCtx(ctx api.StreamContext)

+ type ReadonlyRow interface

+ type Row interface

+ Clone func() Row

+ type Scanner struct

+ func NewScanner(r io.Reader) *Scanner

+ func (s *Scanner) Scan() (tok ast.Token, lit string)

+ func (s *Scanner) ScanBackquoteIdent() (tok ast.Token, lit string)

+ func (s *Scanner) ScanDigit() (tok ast.Token, lit string)

+ func (s *Scanner) ScanIdent() (tok ast.Token, lit string)

+ func (s *Scanner) ScanNumber(startWithDot bool, isNeg bool) (tok ast.Token, lit string)

+ func (s *Scanner) ScanString(isSingle bool) (tok ast.Token, lit string)

+ func (s *Scanner) ScanWhiteSpace() (tok ast.Token, lit string)

+ type SortingData interface

+ Index func(i int) Row

+ Len func() int

+ Swap func(i, j int)

+ type StreamInfo struct

+ Statement string

+ StreamKind string

+ StreamType ast.StreamType

+ func GetDataSourceStatement(m kv.KeyValue, name string) (*StreamInfo, error)

+ type TransformedTupleList struct

+ Content []api.MessageTuple

+ Ctx api.StreamContext

+ Maps []map[string]any

+ Props map[string]string

+ func (l *TransformedTupleList) AllProps() map[string]string

+ func (l *TransformedTupleList) Clone() *TransformedTupleList

+ func (l *TransformedTupleList) DynamicProps(template string) (string, bool)

+ func (l *TransformedTupleList) GetTracerCtx() api.StreamContext

+ func (l *TransformedTupleList) Len() int

+ func (l *TransformedTupleList) RangeOfTuples(f func(index int, tuple api.MessageTuple) bool)

+ func (l *TransformedTupleList) SetTracerCtx(ctx api.StreamContext)

+ func (l *TransformedTupleList) ToMaps() []map[string]any

+ type Tuple struct

+ Ctx api.StreamContext

+ Emitter string

+ Message Message

+ Metadata Metadata

+ Props map[string]string

+ Timestamp time.Time

+ func (t *Tuple) AggregateEval(expr ast.Expr, v CallValuer) []interface{}

+ func (t *Tuple) All(string) (map[string]any, bool)

+ func (t *Tuple) AllMeta() map[string]any

+ func (t *Tuple) AllProps() map[string]string

+ func (t *Tuple) Clone() Row

+ func (t *Tuple) Created() time.Time

+ func (t *Tuple) DynamicProps(template string) (string, bool)

+ func (t *Tuple) FuncValue(key string) (interface{}, bool)

+ func (t *Tuple) GetEmitter() string

+ func (t *Tuple) GetTimestamp() time.Time

+ func (t *Tuple) GetTracerCtx() api.StreamContext

+ func (t *Tuple) IsWatermark() bool

+ func (t *Tuple) Meta(key, table string) (interface{}, bool)

+ func (t *Tuple) MetaData() Metadata

+ func (t *Tuple) Pick(allWildcard bool, cols [][]string, wildcardEmitters map[string]bool, ...)

+ func (t *Tuple) SetTracerCtx(ctx api.StreamContext)

+ func (t *Tuple) ToMap() map[string]interface{}

+ func (t *Tuple) Value(key, table string) (interface{}, bool)

+ type Valuer interface

+ Meta func(key, table string) (interface{}, bool)

+ Value func(key, table string) (interface{}, bool)

+ func MultiAggregateValuer(data AggregateData, singleCallValuer CallValuer, valuers ...Valuer) Valuer

+ func MultiValuer(valuers ...Valuer) Valuer

+ type ValuerEval struct

+ IntegerFloatDivision bool

+ Valuer Valuer

+ func (v *ValuerEval) Eval(expr ast.Expr) interface{}

+ type WatermarkTuple struct

+ Timestamp time.Time

+ func (t *WatermarkTuple) GetTimestamp() time.Time

+ func (t *WatermarkTuple) IsWatermark() bool

+ type WildcardValuer struct

+ Data Wildcarder

+ func (wv *WildcardValuer) Meta(_, _ string) (interface{}, bool)

+ func (wv *WildcardValuer) Value(key, table string) (interface{}, bool)

+ type Wildcarder interface

+ All func(table string) (map[string]any, bool)

+ type WindowRange struct

+ func NewWindowRange(windowStart int64, windowEnd int64) *WindowRange

+ func (r *WindowRange) FuncValue(key string) (interface{}, bool)

+ type WindowRangeValuer struct

+ func (w WindowRangeValuer) Meta(_, _ string) (interface{}, bool)

+ func (w WindowRangeValuer) Value(_, _ string) (interface{}, bool)

+ type WindowTuples struct

+ Content []Row

+ Ctx api.StreamContext

+ func (w *WindowTuples) AddTuple(tuple Row) *WindowTuples

+ func (w *WindowTuples) AggregateEval(expr ast.Expr, v CallValuer) []interface{}

+ func (w *WindowTuples) All(_ string) (map[string]interface{}, bool)

+ func (w *WindowTuples) Clone() Collection

+ func (w *WindowTuples) Filter(indexes []int) Collection

+ func (w *WindowTuples) GetBySrc(emitter string) []Row

+ func (w *WindowTuples) GetTracerCtx() api.StreamContext

+ func (w *WindowTuples) GetWindowRange() *WindowRange

+ func (w *WindowTuples) GroupRange(f func(i int, aggRow CollectionRow) (bool, error)) error

+ func (w *WindowTuples) Index(index int) Row

+ func (w *WindowTuples) Len() int

+ func (w *WindowTuples) Meta(key, table string) (interface{}, bool)

+ func (w *WindowTuples) Pick(allWildcard bool, cols [][]string, wildcardEmitters map[string]bool, ...)

+ func (w *WindowTuples) Range(f func(i int, r ReadonlyRow) (bool, error)) error

+ func (w *WindowTuples) RangeOfTuples(f func(index int, tuple api.MessageTuple) bool)

+ func (w *WindowTuples) RangeSet(f func(i int, r Row) (bool, error)) error

+ func (w *WindowTuples) SetIsAgg(_ bool)

+ func (w *WindowTuples) SetTracerCtx(ctx api.StreamContext)

+ func (w *WindowTuples) Swap(i, j int)

+ func (w *WindowTuples) ToAggMaps() []map[string]interface{}

+ func (w *WindowTuples) ToMap() map[string]interface{}

+ func (w *WindowTuples) ToMaps() []map[string]interface{}

+ func (w *WindowTuples) ToRowMaps() []map[string]interface{}

+ func (w *WindowTuples) Value(key, table string) (interface{}, bool)

Apr 26, 2024 GO-2025-3508 +8 more

  GO-2025-3508: LF Edge eKuiper allows Stored XSS in Rules Functionality in github.com/lf-edge/ekuiper

  GO-2025-3682: LF Edge eKuiper Vulnerable to Stored XSS in Configuration Key Functionality in github.com/lf-edge/ekuiper

  GO-2025-3799: LF Edge eKuiper vulnerable to File Path Traversal leading to file replacement in github.com/lf-edge/ekuiper

  GO-2025-3800: eKuiper /config/uploads API arbitrary file writing may lead to RCE in github.com/lf-edge/ekuiper

  GO-2025-3827: eKuiper API endpoints handling SQL queries with user-controlled table names. in github.com/lf-edge/ekuiper

  GO-2025-4158: LF Edge eKuiper is vulnerable to Arbitrary File Read/Write via unsanitized names and zip extraction in github.com/lf-edge/ekuiper

  GO-2026-6445: LF Edge eKuiper: Arbitrary File and Directory Deletion via Path Traversal in Plugin Installation Endpoint in github.com/lf-edge/ekuiper

  GO-2026-6446: LF Edge eKuiper: Self-XSS in External Service Creation in github.com/lf-edge/ekuiper

  GO-2026-6447: LF Edge eKuiper: SSRF in External Service in github.com/lf-edge/ekuiper

Apr 23, 2024 GO-2025-3508 +8 more

  GO-2025-3508: LF Edge eKuiper allows Stored XSS in Rules Functionality in github.com/lf-edge/ekuiper

  GO-2025-3682: LF Edge eKuiper Vulnerable to Stored XSS in Configuration Key Functionality in github.com/lf-edge/ekuiper

  GO-2025-3799: LF Edge eKuiper vulnerable to File Path Traversal leading to file replacement in github.com/lf-edge/ekuiper

  GO-2025-3800: eKuiper /config/uploads API arbitrary file writing may lead to RCE in github.com/lf-edge/ekuiper

  GO-2025-3827: eKuiper API endpoints handling SQL queries with user-controlled table names. in github.com/lf-edge/ekuiper

  GO-2025-4158: LF Edge eKuiper is vulnerable to Arbitrary File Read/Write via unsanitized names and zip extraction in github.com/lf-edge/ekuiper

  GO-2026-6445: LF Edge eKuiper: Arbitrary File and Directory Deletion via Path Traversal in Plugin Installation Endpoint in github.com/lf-edge/ekuiper

  GO-2026-6446: LF Edge eKuiper: Self-XSS in External Service Creation in github.com/lf-edge/ekuiper

  GO-2026-6447: LF Edge eKuiper: SSRF in External Service in github.com/lf-edge/ekuiper

Apr 22, 2024 GO-2025-3508 +8 more

  GO-2025-3508: LF Edge eKuiper allows Stored XSS in Rules Functionality in github.com/lf-edge/ekuiper

  GO-2025-3682: LF Edge eKuiper Vulnerable to Stored XSS in Configuration Key Functionality in github.com/lf-edge/ekuiper

  GO-2025-3799: LF Edge eKuiper vulnerable to File Path Traversal leading to file replacement in github.com/lf-edge/ekuiper

  GO-2025-3800: eKuiper /config/uploads API arbitrary file writing may lead to RCE in github.com/lf-edge/ekuiper

  GO-2025-3827: eKuiper API endpoints handling SQL queries with user-controlled table names. in github.com/lf-edge/ekuiper

  GO-2025-4158: LF Edge eKuiper is vulnerable to Arbitrary File Read/Write via unsanitized names and zip extraction in github.com/lf-edge/ekuiper

  GO-2026-6445: LF Edge eKuiper: Arbitrary File and Directory Deletion via Path Traversal in Plugin Installation Endpoint in github.com/lf-edge/ekuiper

  GO-2026-6446: LF Edge eKuiper: Self-XSS in External Service Creation in github.com/lf-edge/ekuiper

  GO-2026-6447: LF Edge eKuiper: SSRF in External Service in github.com/lf-edge/ekuiper

Apr 22, 2024 GO-2025-3508 +8 more

  GO-2025-3508: LF Edge eKuiper allows Stored XSS in Rules Functionality in github.com/lf-edge/ekuiper

  GO-2025-3682: LF Edge eKuiper Vulnerable to Stored XSS in Configuration Key Functionality in github.com/lf-edge/ekuiper

  GO-2025-3799: LF Edge eKuiper vulnerable to File Path Traversal leading to file replacement in github.com/lf-edge/ekuiper

  GO-2025-3800: eKuiper /config/uploads API arbitrary file writing may lead to RCE in github.com/lf-edge/ekuiper

  GO-2025-3827: eKuiper API endpoints handling SQL queries with user-controlled table names. in github.com/lf-edge/ekuiper

  GO-2025-4158: LF Edge eKuiper is vulnerable to Arbitrary File Read/Write via unsanitized names and zip extraction in github.com/lf-edge/ekuiper

  GO-2026-6445: LF Edge eKuiper: Arbitrary File and Directory Deletion via Path Traversal in Plugin Installation Endpoint in github.com/lf-edge/ekuiper

  GO-2026-6446: LF Edge eKuiper: Self-XSS in External Service Creation in github.com/lf-edge/ekuiper

  GO-2026-6447: LF Edge eKuiper: SSRF in External Service in github.com/lf-edge/ekuiper

Apr 19, 2024 GO-2025-3508 +8 more

  GO-2025-3508: LF Edge eKuiper allows Stored XSS in Rules Functionality in github.com/lf-edge/ekuiper

  GO-2025-3682: LF Edge eKuiper Vulnerable to Stored XSS in Configuration Key Functionality in github.com/lf-edge/ekuiper

  GO-2025-3799: LF Edge eKuiper vulnerable to File Path Traversal leading to file replacement in github.com/lf-edge/ekuiper

  GO-2025-3800: eKuiper /config/uploads API arbitrary file writing may lead to RCE in github.com/lf-edge/ekuiper

  GO-2025-3827: eKuiper API endpoints handling SQL queries with user-controlled table names. in github.com/lf-edge/ekuiper

  GO-2025-4158: LF Edge eKuiper is vulnerable to Arbitrary File Read/Write via unsanitized names and zip extraction in github.com/lf-edge/ekuiper

  GO-2026-6445: LF Edge eKuiper: Arbitrary File and Directory Deletion via Path Traversal in Plugin Installation Endpoint in github.com/lf-edge/ekuiper

  GO-2026-6446: LF Edge eKuiper: Self-XSS in External Service Creation in github.com/lf-edge/ekuiper

  GO-2026-6447: LF Edge eKuiper: SSRF in External Service in github.com/lf-edge/ekuiper

Oct 21, 2024 GO-2025-3508 +8 more

  GO-2025-3508: LF Edge eKuiper allows Stored XSS in Rules Functionality in github.com/lf-edge/ekuiper

  GO-2025-3682: LF Edge eKuiper Vulnerable to Stored XSS in Configuration Key Functionality in github.com/lf-edge/ekuiper

  GO-2025-3799: LF Edge eKuiper vulnerable to File Path Traversal leading to file replacement in github.com/lf-edge/ekuiper

  GO-2025-3800: eKuiper /config/uploads API arbitrary file writing may lead to RCE in github.com/lf-edge/ekuiper

  GO-2025-3827: eKuiper API endpoints handling SQL queries with user-controlled table names. in github.com/lf-edge/ekuiper

  GO-2025-4158: LF Edge eKuiper is vulnerable to Arbitrary File Read/Write via unsanitized names and zip extraction in github.com/lf-edge/ekuiper

  GO-2026-6445: LF Edge eKuiper: Arbitrary File and Directory Deletion via Path Traversal in Plugin Installation Endpoint in github.com/lf-edge/ekuiper

  GO-2026-6446: LF Edge eKuiper: Self-XSS in External Service Creation in github.com/lf-edge/ekuiper

  GO-2026-6447: LF Edge eKuiper: SSRF in External Service in github.com/lf-edge/ekuiper

Oct 9, 2024 GO-2025-3508 +8 more

  GO-2025-3508: LF Edge eKuiper allows Stored XSS in Rules Functionality in github.com/lf-edge/ekuiper

  GO-2025-3682: LF Edge eKuiper Vulnerable to Stored XSS in Configuration Key Functionality in github.com/lf-edge/ekuiper

  GO-2025-3799: LF Edge eKuiper vulnerable to File Path Traversal leading to file replacement in github.com/lf-edge/ekuiper

  GO-2025-3800: eKuiper /config/uploads API arbitrary file writing may lead to RCE in github.com/lf-edge/ekuiper

  GO-2025-3827: eKuiper API endpoints handling SQL queries with user-controlled table names. in github.com/lf-edge/ekuiper

  GO-2025-4158: LF Edge eKuiper is vulnerable to Arbitrary File Read/Write via unsanitized names and zip extraction in github.com/lf-edge/ekuiper

  GO-2026-6445: LF Edge eKuiper: Arbitrary File and Directory Deletion via Path Traversal in Plugin Installation Endpoint in github.com/lf-edge/ekuiper

  GO-2026-6446: LF Edge eKuiper: Self-XSS in External Service Creation in github.com/lf-edge/ekuiper

  GO-2026-6447: LF Edge eKuiper: SSRF in External Service in github.com/lf-edge/ekuiper

Sep 29, 2024 GO-2025-3508 +8 more

  GO-2025-3508: LF Edge eKuiper allows Stored XSS in Rules Functionality in github.com/lf-edge/ekuiper

  GO-2025-3682: LF Edge eKuiper Vulnerable to Stored XSS in Configuration Key Functionality in github.com/lf-edge/ekuiper

  GO-2025-3799: LF Edge eKuiper vulnerable to File Path Traversal leading to file replacement in github.com/lf-edge/ekuiper

  GO-2025-3800: eKuiper /config/uploads API arbitrary file writing may lead to RCE in github.com/lf-edge/ekuiper

  GO-2025-3827: eKuiper API endpoints handling SQL queries with user-controlled table names. in github.com/lf-edge/ekuiper

  GO-2025-4158: LF Edge eKuiper is vulnerable to Arbitrary File Read/Write via unsanitized names and zip extraction in github.com/lf-edge/ekuiper

  GO-2026-6445: LF Edge eKuiper: Arbitrary File and Directory Deletion via Path Traversal in Plugin Installation Endpoint in github.com/lf-edge/ekuiper

  GO-2026-6446: LF Edge eKuiper: Self-XSS in External Service Creation in github.com/lf-edge/ekuiper

  GO-2026-6447: LF Edge eKuiper: SSRF in External Service in github.com/lf-edge/ekuiper

Sep 14, 2024 GO-2025-3508 +8 more

  GO-2025-3508: LF Edge eKuiper allows Stored XSS in Rules Functionality in github.com/lf-edge/ekuiper

  GO-2025-3682: LF Edge eKuiper Vulnerable to Stored XSS in Configuration Key Functionality in github.com/lf-edge/ekuiper

  GO-2025-3799: LF Edge eKuiper vulnerable to File Path Traversal leading to file replacement in github.com/lf-edge/ekuiper

  GO-2025-3800: eKuiper /config/uploads API arbitrary file writing may lead to RCE in github.com/lf-edge/ekuiper

  GO-2025-3827: eKuiper API endpoints handling SQL queries with user-controlled table names. in github.com/lf-edge/ekuiper

  GO-2025-4158: LF Edge eKuiper is vulnerable to Arbitrary File Read/Write via unsanitized names and zip extraction in github.com/lf-edge/ekuiper

  GO-2026-6445: LF Edge eKuiper: Arbitrary File and Directory Deletion via Path Traversal in Plugin Installation Endpoint in github.com/lf-edge/ekuiper

  GO-2026-6446: LF Edge eKuiper: Self-XSS in External Service Creation in github.com/lf-edge/ekuiper

  GO-2026-6447: LF Edge eKuiper: SSRF in External Service in github.com/lf-edge/ekuiper

Aug 20, 2024 GO-2025-3508 +8 more

  GO-2025-3508: LF Edge eKuiper allows Stored XSS in Rules Functionality in github.com/lf-edge/ekuiper

  GO-2025-3682: LF Edge eKuiper Vulnerable to Stored XSS in Configuration Key Functionality in github.com/lf-edge/ekuiper

  GO-2025-3799: LF Edge eKuiper vulnerable to File Path Traversal leading to file replacement in github.com/lf-edge/ekuiper

  GO-2025-3800: eKuiper /config/uploads API arbitrary file writing may lead to RCE in github.com/lf-edge/ekuiper

  GO-2025-3827: eKuiper API endpoints handling SQL queries with user-controlled table names. in github.com/lf-edge/ekuiper

  GO-2025-4158: LF Edge eKuiper is vulnerable to Arbitrary File Read/Write via unsanitized names and zip extraction in github.com/lf-edge/ekuiper

  GO-2026-6445: LF Edge eKuiper: Arbitrary File and Directory Deletion via Path Traversal in Plugin Installation Endpoint in github.com/lf-edge/ekuiper

  GO-2026-6446: LF Edge eKuiper: Self-XSS in External Service Creation in github.com/lf-edge/ekuiper

  GO-2026-6447: LF Edge eKuiper: SSRF in External Service in github.com/lf-edge/ekuiper

Jul 30, 2024 GO-2025-3508 +8 more

  GO-2025-3508: LF Edge eKuiper allows Stored XSS in Rules Functionality in github.com/lf-edge/ekuiper

  GO-2025-3682: LF Edge eKuiper Vulnerable to Stored XSS in Configuration Key Functionality in github.com/lf-edge/ekuiper

  GO-2025-3799: LF Edge eKuiper vulnerable to File Path Traversal leading to file replacement in github.com/lf-edge/ekuiper

  GO-2025-3800: eKuiper /config/uploads API arbitrary file writing may lead to RCE in github.com/lf-edge/ekuiper

  GO-2025-3827: eKuiper API endpoints handling SQL queries with user-controlled table names. in github.com/lf-edge/ekuiper

  GO-2025-4158: LF Edge eKuiper is vulnerable to Arbitrary File Read/Write via unsanitized names and zip extraction in github.com/lf-edge/ekuiper

  GO-2026-6445: LF Edge eKuiper: Arbitrary File and Directory Deletion via Path Traversal in Plugin Installation Endpoint in github.com/lf-edge/ekuiper

  GO-2026-6446: LF Edge eKuiper: Self-XSS in External Service Creation in github.com/lf-edge/ekuiper

  GO-2026-6447: LF Edge eKuiper: SSRF in External Service in github.com/lf-edge/ekuiper

Jul 16, 2024 GO-2025-3508 +8 more

  GO-2025-3508: LF Edge eKuiper allows Stored XSS in Rules Functionality in github.com/lf-edge/ekuiper

  GO-2025-3682: LF Edge eKuiper Vulnerable to Stored XSS in Configuration Key Functionality in github.com/lf-edge/ekuiper

  GO-2025-3799: LF Edge eKuiper vulnerable to File Path Traversal leading to file replacement in github.com/lf-edge/ekuiper

  GO-2025-3800: eKuiper /config/uploads API arbitrary file writing may lead to RCE in github.com/lf-edge/ekuiper

  GO-2025-3827: eKuiper API endpoints handling SQL queries with user-controlled table names. in github.com/lf-edge/ekuiper

  GO-2025-4158: LF Edge eKuiper is vulnerable to Arbitrary File Read/Write via unsanitized names and zip extraction in github.com/lf-edge/ekuiper

  GO-2026-6445: LF Edge eKuiper: Arbitrary File and Directory Deletion via Path Traversal in Plugin Installation Endpoint in github.com/lf-edge/ekuiper

  GO-2026-6446: LF Edge eKuiper: Self-XSS in External Service Creation in github.com/lf-edge/ekuiper

  GO-2026-6447: LF Edge eKuiper: SSRF in External Service in github.com/lf-edge/ekuiper

Jul 8, 2024 GO-2025-3508 +8 more

  GO-2025-3508: LF Edge eKuiper allows Stored XSS in Rules Functionality in github.com/lf-edge/ekuiper

  GO-2025-3682: LF Edge eKuiper Vulnerable to Stored XSS in Configuration Key Functionality in github.com/lf-edge/ekuiper

  GO-2025-3799: LF Edge eKuiper vulnerable to File Path Traversal leading to file replacement in github.com/lf-edge/ekuiper

  GO-2025-3800: eKuiper /config/uploads API arbitrary file writing may lead to RCE in github.com/lf-edge/ekuiper

  GO-2025-3827: eKuiper API endpoints handling SQL queries with user-controlled table names. in github.com/lf-edge/ekuiper

  GO-2025-4158: LF Edge eKuiper is vulnerable to Arbitrary File Read/Write via unsanitized names and zip extraction in github.com/lf-edge/ekuiper

  GO-2026-6445: LF Edge eKuiper: Arbitrary File and Directory Deletion via Path Traversal in Plugin Installation Endpoint in github.com/lf-edge/ekuiper

  GO-2026-6446: LF Edge eKuiper: Self-XSS in External Service Creation in github.com/lf-edge/ekuiper

  GO-2026-6447: LF Edge eKuiper: SSRF in External Service in github.com/lf-edge/ekuiper

Jul 4, 2024 GO-2025-3508 +8 more

  GO-2025-3508: LF Edge eKuiper allows Stored XSS in Rules Functionality in github.com/lf-edge/ekuiper

  GO-2025-3682: LF Edge eKuiper Vulnerable to Stored XSS in Configuration Key Functionality in github.com/lf-edge/ekuiper

  GO-2025-3799: LF Edge eKuiper vulnerable to File Path Traversal leading to file replacement in github.com/lf-edge/ekuiper

  GO-2025-3800: eKuiper /config/uploads API arbitrary file writing may lead to RCE in github.com/lf-edge/ekuiper

  GO-2025-3827: eKuiper API endpoints handling SQL queries with user-controlled table names. in github.com/lf-edge/ekuiper

  GO-2025-4158: LF Edge eKuiper is vulnerable to Arbitrary File Read/Write via unsanitized names and zip extraction in github.com/lf-edge/ekuiper

  GO-2026-6445: LF Edge eKuiper: Arbitrary File and Directory Deletion via Path Traversal in Plugin Installation Endpoint in github.com/lf-edge/ekuiper

  GO-2026-6446: LF Edge eKuiper: Self-XSS in External Service Creation in github.com/lf-edge/ekuiper

  GO-2026-6447: LF Edge eKuiper: SSRF in External Service in github.com/lf-edge/ekuiper

Jun 28, 2024 GO-2025-3508 +8 more

  GO-2025-3508: LF Edge eKuiper allows Stored XSS in Rules Functionality in github.com/lf-edge/ekuiper

  GO-2025-3682: LF Edge eKuiper Vulnerable to Stored XSS in Configuration Key Functionality in github.com/lf-edge/ekuiper

  GO-2025-3799: LF Edge eKuiper vulnerable to File Path Traversal leading to file replacement in github.com/lf-edge/ekuiper

  GO-2025-3800: eKuiper /config/uploads API arbitrary file writing may lead to RCE in github.com/lf-edge/ekuiper

  GO-2025-3827: eKuiper API endpoints handling SQL queries with user-controlled table names. in github.com/lf-edge/ekuiper

  GO-2025-4158: LF Edge eKuiper is vulnerable to Arbitrary File Read/Write via unsanitized names and zip extraction in github.com/lf-edge/ekuiper

  GO-2026-6445: LF Edge eKuiper: Arbitrary File and Directory Deletion via Path Traversal in Plugin Installation Endpoint in github.com/lf-edge/ekuiper

  GO-2026-6446: LF Edge eKuiper: Self-XSS in External Service Creation in github.com/lf-edge/ekuiper

  GO-2026-6447: LF Edge eKuiper: SSRF in External Service in github.com/lf-edge/ekuiper

Jun 17, 2024 GO-2025-3508 +8 more

  GO-2025-3508: LF Edge eKuiper allows Stored XSS in Rules Functionality in github.com/lf-edge/ekuiper

  GO-2025-3682: LF Edge eKuiper Vulnerable to Stored XSS in Configuration Key Functionality in github.com/lf-edge/ekuiper

  GO-2025-3799: LF Edge eKuiper vulnerable to File Path Traversal leading to file replacement in github.com/lf-edge/ekuiper

  GO-2025-3800: eKuiper /config/uploads API arbitrary file writing may lead to RCE in github.com/lf-edge/ekuiper

  GO-2025-3827: eKuiper API endpoints handling SQL queries with user-controlled table names. in github.com/lf-edge/ekuiper

  GO-2025-4158: LF Edge eKuiper is vulnerable to Arbitrary File Read/Write via unsanitized names and zip extraction in github.com/lf-edge/ekuiper

  GO-2026-6445: LF Edge eKuiper: Arbitrary File and Directory Deletion via Path Traversal in Plugin Installation Endpoint in github.com/lf-edge/ekuiper

  GO-2026-6446: LF Edge eKuiper: Self-XSS in External Service Creation in github.com/lf-edge/ekuiper

  GO-2026-6447: LF Edge eKuiper: SSRF in External Service in github.com/lf-edge/ekuiper

May 11, 2024 GO-2025-3508 +8 more

  GO-2025-3508: LF Edge eKuiper allows Stored XSS in Rules Functionality in github.com/lf-edge/ekuiper

  GO-2025-3682: LF Edge eKuiper Vulnerable to Stored XSS in Configuration Key Functionality in github.com/lf-edge/ekuiper

  GO-2025-3799: LF Edge eKuiper vulnerable to File Path Traversal leading to file replacement in github.com/lf-edge/ekuiper

  GO-2025-3800: eKuiper /config/uploads API arbitrary file writing may lead to RCE in github.com/lf-edge/ekuiper

  GO-2025-3827: eKuiper API endpoints handling SQL queries with user-controlled table names. in github.com/lf-edge/ekuiper

  GO-2025-4158: LF Edge eKuiper is vulnerable to Arbitrary File Read/Write via unsanitized names and zip extraction in github.com/lf-edge/ekuiper

  GO-2026-6445: LF Edge eKuiper: Arbitrary File and Directory Deletion via Path Traversal in Plugin Installation Endpoint in github.com/lf-edge/ekuiper

  GO-2026-6446: LF Edge eKuiper: Self-XSS in External Service Creation in github.com/lf-edge/ekuiper

  GO-2026-6447: LF Edge eKuiper: SSRF in External Service in github.com/lf-edge/ekuiper

Apr 29, 2024 GO-2025-3508 +8 more

  GO-2025-3508: LF Edge eKuiper allows Stored XSS in Rules Functionality in github.com/lf-edge/ekuiper

  GO-2025-3682: LF Edge eKuiper Vulnerable to Stored XSS in Configuration Key Functionality in github.com/lf-edge/ekuiper

  GO-2025-3799: LF Edge eKuiper vulnerable to File Path Traversal leading to file replacement in github.com/lf-edge/ekuiper

  GO-2025-3800: eKuiper /config/uploads API arbitrary file writing may lead to RCE in github.com/lf-edge/ekuiper

  GO-2025-3827: eKuiper API endpoints handling SQL queries with user-controlled table names. in github.com/lf-edge/ekuiper

  GO-2025-4158: LF Edge eKuiper is vulnerable to Arbitrary File Read/Write via unsanitized names and zip extraction in github.com/lf-edge/ekuiper

  GO-2026-6445: LF Edge eKuiper: Arbitrary File and Directory Deletion via Path Traversal in Plugin Installation Endpoint in github.com/lf-edge/ekuiper

  GO-2026-6446: LF Edge eKuiper: Self-XSS in External Service Creation in github.com/lf-edge/ekuiper

  GO-2026-6447: LF Edge eKuiper: SSRF in External Service in github.com/lf-edge/ekuiper

Apr 28, 2024 GO-2025-3508 +8 more

  GO-2025-3508: LF Edge eKuiper allows Stored XSS in Rules Functionality in github.com/lf-edge/ekuiper

  GO-2025-3682: LF Edge eKuiper Vulnerable to Stored XSS in Configuration Key Functionality in github.com/lf-edge/ekuiper

  GO-2025-3799: LF Edge eKuiper vulnerable to File Path Traversal leading to file replacement in github.com/lf-edge/ekuiper

  GO-2025-3800: eKuiper /config/uploads API arbitrary file writing may lead to RCE in github.com/lf-edge/ekuiper

  GO-2025-3827: eKuiper API endpoints handling SQL queries with user-controlled table names. in github.com/lf-edge/ekuiper

  GO-2025-4158: LF Edge eKuiper is vulnerable to Arbitrary File Read/Write via unsanitized names and zip extraction in github.com/lf-edge/ekuiper

  GO-2026-6445: LF Edge eKuiper: Arbitrary File and Directory Deletion via Path Traversal in Plugin Installation Endpoint in github.com/lf-edge/ekuiper

  GO-2026-6446: LF Edge eKuiper: Self-XSS in External Service Creation in github.com/lf-edge/ekuiper

  GO-2026-6447: LF Edge eKuiper: SSRF in External Service in github.com/lf-edge/ekuiper