cve.bz

erupts erupt vulnerabilities, newest first

Filter

By year: all 2026 2025 2024 2023 2022 2021

  1. 2.1CVE-2026-124504EPSS 0.2%

    A vulnerability was detected in erupts erupt up to 2.3.0. Affected by this issue is the function ReportService.queryBiData of the file ReportService.java. Performing a manipulation of the argument sort results in sql injection. The attack …

  2. 6.0CVE-2026-111390EPSS 0.4%

    Erupt through 2.3.0 contains an HQL injection vulnerability that allows authenticated users to bypass tree-scoped data filters by injecting unescaped quotes into the linkTreeVal parameter of POST /erupt-api/data/table/{erupt}. Attackers ho…

  3. 5.5CVE-2026-4594EPSS 0.3%

    A vulnerability has been found in erupts erupt up to 1.13.3. Affected by this issue is the function geneEruptHqlOrderBy of the file erupt-data/erupt-jpa/src/main/java/xyz/erupt/jpa/dao/EruptJpaUtils.java. Such manipulation of the argument …

  4. 2.1CVE-2026-4593EPSS 0.2%

    A flaw has been found in erupts erupt bis 1.13.3. Affected by this vulnerability is the function EruptDataQuery of the file erupt-ai/src/main/java/xyz/erupt/ai/call/impl/EruptDataQuery.java of the component MCP Tool Interface. This manipul…