Erupts

4 CVEs in 1 Erupts product, including Erupt. Newest: CVE-2026-124504 (2026-11-09). Severity, EPSS and public exploits for each.

Erupts products with known CVEs

ProductCVEs
Erupt4
Erupts CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-124504Medium6.32026-11-09A vulnerability was detected in erupts erupt up to 2.3.0. Affected by this issue is the function ReportService.queryBiData of the file ReportService.java. Perf…
CVE-2026-111390Medium5.32026-10-16Erupt through 2.3.0 contains an HQL injection vulnerability that allows authenticated users to bypass tree-scoped data filters by injecting unescaped quotes in…
CVE-2026-4594High7.32026-03-23A vulnerability has been found in erupts erupt up to 1.13.3. Affected by this issue is the function geneEruptHqlOrderBy of the file erupt-data/erupt-jpa/src/ma…
CVE-2026-4593Medium6.32026-03-23A flaw has been found in erupts erupt bis 1.13.3. Affected by this vulnerability is the function EruptDataQuery of the file erupt-ai/src/main/java/xyz/erupt/ai…