https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-23T06:06:44.152106+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-115331 CVE-2026-115331 — Lotus through 0.10.2 SQL Injection via Metric Property Names and Filters 2026-10-23T06:06:44.153235+00:00

Affected: uselotus lotus

Lotus through 0.10.2 contains an sql injection vulnerability that allows authenticated organization users to inject SQL by supplying crafted billable metric property_name or categorical filter values. Attackers can embed SQL in values rendered unescaped into Jinja-generated counter, gauge and rate metric queries to access the database shared by all tenants.