Executive brief
LF Edge eKuiper has a SQL Injection in sqlKvStore in github.com/lf-edge/ekuiper
Affected products
- Go github.com/lf-edge/ekuiper
- PyPI ekuiper
Junglewise Threat Intelligence
CVE-2024-43406: GO-2024-3078 - LF Edge eKuiper has a SQL Injection in sqlKvStore in github.com/lf-edge/ekuiper
CVE-2024-43406 · Severity: low · CVSS 3.1 · Published 2024-08-22
Technologies: github.com/lf-edge/ekuiper (Go). Vendors: Go, PyPI.
Related threats
- LF Edge eKuiper path traversal in plugin installation
- LF Edge eKuiper SSRF in external service registration
- LF Edge eKuiper stored XSS in external service creation
- GO-2025-4158 - LF Edge eKuiper is vulnerable to Arbitrary File Read/Write via unsanitized names and zip extraction in github.com/lf-edge/ekuiper
- GO-2025-3827 - eKuiper API endpoints handling SQL queries with user-controlled table names. in github.com/lf-edge/ekuiper