CVE-2026-44267 | enspirit Elo up to 1.0.0 member_access handler src/transform.ts defaultFormats.elo.parse code injection

November 3, 2026 Yanac

A vulnerability classified as critical has been found in enspirit Elo up to 1.0.0. The affected element is the function defaultFormats.elo.parse of the file src/transform.ts of the component member_access handler. This manipulation causes code injection.

This vulnerability appears as CVE-2026-44267. The attack may be initiated remotely. There is no available exploit.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More