Enspirit

3 CVEs in 1 Enspirit product, including Elo. Newest: CVE-2026-44267 (2026-11-03). Severity, EPSS and public exploits for each.

Enspirit products with known CVEs

ProductCVEs
Elo3
Enspirit CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-44267Critical9.82026-11-03Elo is a purely functional expression language for no-code tools. Prior to 1.0.1, plain Elo strings supplied to defaultFormats.elo.parse(), bin/elo, or elo-lan…
CVE-2026-44266Critical9.82026-11-03Elo is a purely functional expression language for no-code tools. Prior to 1.0.1, the Ruby backend in src/compilers/ruby.ts embeds attacker-controlled text in…
CVE-2026-44265High7.42026-11-03Elo is a purely functional expression language for no-code tools. Prior to 1.0.1, Elo's programmatic AST API accepts arbitrary values from JSON-deserialized in…