Browse all 3 CVE security advisories affecting enspirit. AI-powered Chinese analysis, POCs, and references for each vulnerability.
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-44267 | Elo: Sandbox escape to arbitrary Node.js / browser code execution via unfiltered `.constructor` member access in Elo JavaScript emitter — elo CWE-79 | 9.8 | Critical | 2026-11-03 |
| CVE-2026-44266 | Elo: Remote Code Execution in Elo Ruby backend via unescaped `#{...}` interpolation in emitted string literals and subtype-constraint labels — elo CWE-94 | 9.8 | Critical | 2026-11-03 |
| CVE-2026-44265 | Elo: Code injection in Elo backends via unvalidated emission of programmatic AST fields — elo CWE-20 | 7.4 | High | 2026-11-03 |
This page lists every published CVE security advisory associated with enspirit. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.