tocsin

CVE-2025-24978

3 advisories.

Go/github.com/lf-edge/ekuiper/v2 CVE-2025-24978: low 3.7

LF Edge eKuiper: Self-XSS in External Service Creation

Action: Upgrade github.com/lf-edge/ekuiper/v2 to 2.4.0 or later.

go get github.com/lf-edge/ekuiper/v2@v2.4.0

Affected

introducedfixedlast affected
02.4.0-

Fixed versions

2.4.0

Sources

CVE-2025-24978 · published · modified · JSON

Go/github.com/lf-edge/ekuiper CVE-2025-24978: unknown

LF Edge eKuiper: Self-XSS in External Service Creation in github.com/lf-edge/ekuiper

Action: No fix published. Pin and monitor.

Affected

introducedfixedlast affected
0--

Fixed versions

No fixed version in the source.

Sources

CVE-2025-24978 · published · modified · JSON

Go/github.com/lf-edge/ekuiper/v2 CVE-2025-24978: unknown

LF Edge eKuiper: Self-XSS in External Service Creation in github.com/lf-edge/ekuiper

Action: Upgrade github.com/lf-edge/ekuiper/v2 to 2.4.0 or later.

go get github.com/lf-edge/ekuiper/v2@v2.4.0

Affected

introducedfixedlast affected
02.4.0-

Fixed versions

2.4.0

Sources

CVE-2025-24978 · published · modified · JSON