Lf-edge vulnerabilities
We track 2 vulnerabilities in Lf-edge products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on July 24, 2025.
2vulnerabilities
1critical
1high
0exploited
9.3average CVSS score
Latest Lf-edge vulnerabilities
- 9.8 Critical severity
ekuiper: Improper Neutralization of Special Elements used in an SQL Command
LF Edge eKuiper is a lightweight IoT data analytics and stream processing engine running on resource-constraint edge devices. In versions before 2.2.1, there is a critical SQL Injection vulnerability in the getLast API functionality of the eKuiper project. Thi
- 8.8 High severity
ekuiper: Improper Neutralization of Special Elements used in an SQL Command
LF Edge eKuiper is a lightweight IoT data analytics and stream processing engine running on resource-constraint edge devices. A user could utilize and exploit SQL Injection to allow the execution of malicious SQL query via Get method in sqlKvStore. This vulner