GO-2025-4158
NoneCVSS
—
EPSS
—
Published
Nov 25, 2025
CISA due date
—
The record
LF Edge eKuiper is vulnerable to Arbitrary File Read/Write via unsanitized names and zip extraction in github.com/lf-edge/ekuiper
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Go | github.com/lf-edge/ekuiper | 0 | No fix |
| Go | github.com/lf-edge/ekuiper/v2 | 0 | 2.3.0 |