tocsin

CVE-2025-58363

3 advisories.

Go/github.com/lf-edge/ekuiper/v2 CVE-2025-58363: medium 5.5

LF Edge eKuiper: Arbitrary File and Directory Deletion via Path Traversal in Plugin Installation Endpoint

Action: Upgrade github.com/lf-edge/ekuiper/v2 to 2.4.1 or later.

go get github.com/lf-edge/ekuiper/v2@v2.4.1

Affected

introducedfixedlast affected
02.4.1-

Fixed versions

2.4.1

Sources

CVE-2025-58363 · published · modified · JSON

Go/github.com/lf-edge/ekuiper CVE-2025-58363: unknown

LF Edge eKuiper: Arbitrary File and Directory Deletion via Path Traversal in Plugin Installation Endpoint in github.com/lf-edge/ekuiper

Action: No fix published. Pin and monitor.

Affected

introducedfixedlast affected
0--

Fixed versions

No fixed version in the source.

Sources

CVE-2025-58363 · published · modified · JSON

Go/github.com/lf-edge/ekuiper/v2 CVE-2025-58363: unknown

LF Edge eKuiper: Arbitrary File and Directory Deletion via Path Traversal in Plugin Installation Endpoint in github.com/lf-edge/ekuiper

Action: Upgrade github.com/lf-edge/ekuiper/v2 to 2.4.1 or later.

go get github.com/lf-edge/ekuiper/v2@v2.4.1

Affected

introducedfixedlast affected
02.4.1-

Fixed versions

2.4.1

Sources

CVE-2025-58363 · published · modified · JSON