Affected by GO-2024-3078 and 6 other vulnerabilities

GO-2024-3078: LF Edge eKuiper has a SQL Injection in sqlKvStore in github.com/lf-edge/ekuiper

GO-2025-3508: LF Edge eKuiper allows Stored XSS in Rules Functionality in github.com/lf-edge/ekuiper

GO-2025-3682: LF Edge eKuiper Vulnerable to Stored XSS in Configuration Key Functionality in github.com/lf-edge/ekuiper

GO-2025-3799: LF Edge eKuiper vulnerable to File Path Traversal leading to file replacement in github.com/lf-edge/ekuiper

GO-2025-3800: eKuiper /config/uploads API arbitrary file writing may lead to RCE in github.com/lf-edge/ekuiper

GO-2025-3827: eKuiper API endpoints handling SQL queries with user-controlled table names. in github.com/lf-edge/ekuiper

GO-2025-4158: LF Edge eKuiper is vulnerable to Arbitrary File Read/Write via unsanitized names and zip extraction in github.com/lf-edge/ekuiper

The highest tagged major version is v2.

cert

package

v1.14.0 Latest Latest Go to latest Published: Jun 26, 2024 License: Apache-2.0 Imports: 7 Imported by: 0

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/lf-edge/ekuiper

Links

Open Source Insights

Documentation ¶

Index ¶

func GenTLSConfig(props map[string]interface{}, typ string) (*tls.Config, error)
func GenerateTLSForClient(Opts *TlsConfigurationOptions) (*tls.Config, error)
type TlsConfigurationOptions
- func (opts *TlsConfigurationOptions) TlsConfigLog(typ string)

Constants ¶

This section is empty.

Variables ¶

This section is empty.

Functions ¶

func GenTLSConfig ¶

func GenTLSConfig(props map[string]interface{}, typ string) (*tls.Config, error)

func GenerateTLSForClient ¶

func GenerateTLSForClient(
	Opts *TlsConfigurationOptions,
) (*tls.Config, error)

Types ¶

type TlsConfigurationOptions ¶

type TlsConfigurationOptions struct {
	SkipCertVerify       bool   `json:"insecureSkipVerify"`
	CertificationRaw     string `json:"certificationRaw"`
	PrivateKeyRaw        string `json:"privateKeyRaw"`
	RootCARaw            string `json:"rootCARaw"`
	CertFile             string `json:"certificationPath"`
	KeyFile              string `json:"privateKeyPath"`
	CaFile               string `json:"rootCaPath"`
	TLSMinVersion        string `json:"tlsMinVersion"`
	RenegotiationSupport string `json:"renegotiationSupport"`
	// contains filtered or unexported fields
}

func (*TlsConfigurationOptions) TlsConfigLog ¶

func (opts *TlsConfigurationOptions) TlsConfigLog(typ string)

Source Files ¶

View all Source files

cert.go

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL