https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-23T08:38:55.790516+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-115331 fkie_cve-2026-115331 2026-10-23T08:38:55.792193+00:00

Lotus through 0.10.2 contains an sql injection vulnerability that allows authenticated organization users to inject SQL by supplying crafted billable metric property_name or categorical filter values. Attackers can embed SQL in values rendered unescaped into Jinja-generated counter, gauge and rate metric queries to access the database shared by all tenants.

 https://db.gcve.eu/vuln/ghsa-v5rh-mv3x-53gj GHSA-v5rh-mv3x-53gj 2026-10-23T08:38:55.792285+00:00

Lotus through 0.10.2 contains an sql injection vulnerability that allows authenticated organization users to inject SQL by supplying crafted billable metric property_name or categorical filter values. Attackers can embed SQL in values rendered unescaped into Jinja-generated counter, gauge and rate metric queries to access the database shared by all tenants.