ekuiper vulnerabilities

2 known vulnerabilities in ekuiper from Lf-edge. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  ekuiper: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2025-54379Jul 24, 2025Lf-edge

  LF Edge eKuiper is a lightweight IoT data analytics and stream processing engine running on resource-constraint edge devices. In versions before 2.2.1, there is a critical SQL Injection vulnerability in the getLast API functionality of the eKuiper project. Thi

• 8.8 High severity

  ekuiper: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2024-43406Aug 20, 2024Lf-edge

  LF Edge eKuiper is a lightweight IoT data analytics and stream processing engine running on resource-constraint edge devices. A user could utilize and exploit SQL Injection to allow the execution of malicious SQL query via Get method in sqlKvStore. This vulner