Affected by GO-2024-3078 and 9 other vulnerabilities

GO-2024-3078: LF Edge eKuiper has a SQL Injection in sqlKvStore in github.com/lf-edge/ekuiper

GO-2025-3508: LF Edge eKuiper allows Stored XSS in Rules Functionality in github.com/lf-edge/ekuiper

GO-2025-3682: LF Edge eKuiper Vulnerable to Stored XSS in Configuration Key Functionality in github.com/lf-edge/ekuiper

GO-2025-3799: LF Edge eKuiper vulnerable to File Path Traversal leading to file replacement in github.com/lf-edge/ekuiper

GO-2025-3800: eKuiper /config/uploads API arbitrary file writing may lead to RCE in github.com/lf-edge/ekuiper

GO-2025-3827: eKuiper API endpoints handling SQL queries with user-controlled table names. in github.com/lf-edge/ekuiper

GO-2025-4158: LF Edge eKuiper is vulnerable to Arbitrary File Read/Write via unsanitized names and zip extraction in github.com/lf-edge/ekuiper

GO-2026-6445: LF Edge eKuiper: Arbitrary File and Directory Deletion via Path Traversal in Plugin Installation Endpoint in github.com/lf-edge/ekuiper

GO-2026-6446: LF Edge eKuiper: Self-XSS in External Service Creation in github.com/lf-edge/ekuiper

GO-2026-6447: LF Edge eKuiper: SSRF in External Service in github.com/lf-edge/ekuiper

The highest tagged major version is v2.

httpserver

package

v1.14.0-dev.1 Latest Latest Go to latest Published: Mar 25, 2024 License: Apache-2.0 Imports: 16 Imported by: 0

Details

View Source

const (
	TopicPrefix            = "$$httppush/"
	WebsocketTopicPrefix   = "$$websocket/"
	WebsocketServerDataKey = "$$websocket/server/data"
)

This section is empty.

func CheckWebsocketEndpoint(endpoint string) bool

func GetWebsocketEndpointCh(endpoint string) (string, string, chan struct{}, error)

func RegisterEndpoint(endpoint string, method string, _ string) (string, chan struct{}, error)

func RegisterWebSocketEndpoint(ctx api.StreamContext, endpoint string) (string, string, chan struct{}, error)

func UnRegisterWebSocketEndpoint(endpoint string) error

func UnregisterEndpoint(endpoint string)

This section is empty.