erupt vulnerabilities

CVEs whose affected-version data names the erupt package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-111390Medium· 5.3

today

Erupt through 2.3.0 HQL Injection via linkTreeVal in Data Table API

Erupt through 2.3.0 contains an HQL injection vulnerability that allows authenticated users to bypass tree-scoped data filters by injecting unescaped quotes into the linkTreeVal parameter of POST /erupt-api/data/table/{erupt}. Attackers …

▾ Sunliterupts · eruptvia CVEORG