| id: GO-2025-3827 |
| modules: |
| - module: github.com/lf-edge/ekuiper |
| vulnerable_at: 1.14.7 |
| - module: github.com/lf-edge/ekuiper/v2 |
| versions: |
| - fixed: 2.2.1 |
| vulnerable_at: 2.2.0 |
| summary: eKuiper API endpoints handling SQL queries with user-controlled table names. in github.com/lf-edge/ekuiper |
| cves: |
| - CVE-2025-54379 |
| ghsas: |
| - GHSA-526j-mv3p-f4vv |
| references: |
| - advisory: https://github.com/lf-edge/ekuiper/security/advisories/GHSA-526j-mv3p-f4vv |
| - advisory: https://nvd.nist.gov/vuln/detail/CVE-2025-54379 |
| - fix: https://github.com/lf-edge/ekuiper/commit/72c4918744934deebf04e324ae66933ec089ebd3 |
| source: |
| id: GHSA-526j-mv3p-f4vv |
| created: 2025-07-28T20:59:52.489395616Z |
| review_status: UNREVIEWED |
