uselotus vulnerabilities
6 published CVEs name uselotus among the affected products.
- 6Published CVEs6 of them scored
- 6Last 12 monthspublished in the last year
- 0Critical5 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-115334
Lotus through 0.10.2 Authorization Bypass via switch_organization Endpoint
uselotus · lotus
High7.6 - CVE-2026-115333
Lotus through 0.10.2 Improper Authentication via Event Ingestion API Key Prefix
uselotus · lotus
High8.2 - CVE-2026-115332
Lotus through 0.10.2 SQL Injection via Subscription Filter Keys
uselotus · lotus
High8.7 - CVE-2026-115331
Lotus through 0.10.2 SQL Injection via Metric Property Names and Filters
uselotus · lotus
High8.7 - CVE-2026-115330
Lotus through 0.10.2 SQL Injection via Custom SQL Billable Metrics
uselotus · lotus
High8.7 - CVE-2026-115329
Lotus through 0.10.2 Cross-Organization IDOR via SubscriptionViewSet
uselotus · lotus
Medium6.0