Skip to content

CVE record · 1 source

CVE-2026-44266

CVSS 9.8

Elo is a purely functional expression language for no-code tools.

Vendor: Enspirit
Product: elo
CVSS v3.1: 9.8 AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness: CWE-94, CWE-116, CWE-1336

Coverage

1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

38

CVE NVD 3h ago

Elo is a purely functional expression language for no-code tools.

Elo is a purely functional expression language for no-code tools. Prior to 1.0.1, the Ruby backend in src/compilers/ruby.ts embeds attacker-controlled text in Ruby double-quoted strings without escaping #, so Ruby interpolation…

CVSS 9.8 Fix available CVE-2026-44266 Enspirit