Vulnerabilities

TI-2025-34188 CVE-2025-54379 · GHSA-526j-mv3p-f4vv

eKuiper API endpoints handling SQL queries with user-controlled table names.

HIGH 80

LF Edge eKuiper is a lightweight IoT data analytics and stream processing engine running on resource-constraint edge devices.

CVSS 4.0HIGH 8.9 Network No auth No interaction EPSS 0.00874 Published 2025-07-24 Fixed in 2.2.1 CWE-89

TI-2024-34965 CVE-2024-52290 · GHSA-9cwv-pxcr-hfjc

MEDIUM 61

LF Edge eKuiper is a lightweight internet of things (IoT) data analytics and stream processing engine.

CVSS 3.1MEDIUM 6.3 Network Low privileges User interaction EPSS 0.00304 Published 2025-05-14 Fixed in 2.1.0 CWE-79

TI-2024-29055 CVE-2024-43406 · GHSA-r5ph-4jxm-6j9p

HIGH 73

LF Edge eKuiper is a lightweight IoT data analytics and stream processing engine running on resource-constraint edge devices.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00894 Published 2024-08-20 Fixed in 1.14.2 CWE-89