Browse all 6 CVE security advisories affecting uselotus. AI-powered Chinese analysis, POCs, and references for each vulnerability.
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-115334 | Lotus through 0.10.2 Authorization Bypass via switch_organization Endpoint — lotus CWE-639 | 6.8 | Medium | 2026-10-22 |
| CVE-2026-115333 | Lotus through 0.10.2 Improper Authentication via Event Ingestion API Key Prefix — lotus CWE-287 | 5.9 | Medium | 2026-10-22 |
| CVE-2026-115332 | Lotus through 0.10.2 SQL Injection via Subscription Filter Keys — lotus CWE-89 | 8.8 | High | 2026-10-22 |
| CVE-2026-115331 | Lotus through 0.10.2 SQL Injection via Metric Property Names and Filters — lotus CWE-89 | 8.8 | High | 2026-10-22 |
| CVE-2026-115329 | Lotus through 0.10.2 Cross-Organization IDOR via SubscriptionViewSet — lotus CWE-639 | 5.9 | Medium | 2026-10-22 |
| CVE-2026-115330 | Lotus through 0.10.2 SQL Injection via Custom SQL Billable Metrics — lotus CWE-89 | 8.8 | High | 2026-10-22 |
This page lists every published CVE security advisory associated with uselotus. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.