CVE-2026-44266 | enspirit Elo up to 1.0.0 Ruby backend src/compilers/ruby.ts defaultFormats.elo.parse code injection

November 3, 2026 Yanac

A vulnerability labeled as critical has been found in enspirit Elo up to 1.0.0. This vulnerability affects the function defaultFormats.elo.parse of the file src/compilers/ruby.ts of the component Ruby backend. Executing a manipulation can lead to code injection.

This vulnerability is registered as CVE-2026-44266. It is possible to launch the attack remotely. No exploit is available.

The affected component should be upgraded.VulDB Recent EntriesRead More