Section

Vulnerabilities

CVE records from NVD, ZDI advisories and the CISA KEV catalog, with CVSS, EPSS, SSVC and exploitation state.

3 matching records.

1. 38
   CVE NVD 4h ago

   Elo is a purely functional expression language for no-code tools.

   Elo is a purely functional expression language for no-code tools. Prior to 1.0.1, plain Elo strings supplied to defaultFormats.elo.parse(), bin/elo, or elo-lang.org/try can use .constructor.constructor to reach JavaScript…

   CVSS 9.8 Fix available CVE-2026-44267 Enspirit
2. 38
   CVE NVD 4h ago

   Elo is a purely functional expression language for no-code tools.

   Elo is a purely functional expression language for no-code tools. Prior to 1.0.1, the Ruby backend in src/compilers/ruby.ts embeds attacker-controlled text in Ruby double-quoted strings without escaping #, so Ruby interpolation…

   CVSS 9.8 Fix available CVE-2026-44266 Enspirit
3. 30
   CVE NVD 4h ago

   Elo is a purely functional expression language for no-code tools.

   Elo is a purely functional expression language for no-code tools. Prior to 1.0.1, Elo's programmatic AST API accepts arbitrary values from JSON-deserialized input, plugin output, or other untyped sources and interpolates them…

   CVSS 7.4 Fix available CVE-2026-44265 Enspirit

Same filters as JSON: /api/items?category=vuln&window=30d&vendor=Enspirit&limit=100. RSS for this section: feed.xml.