Eenspirit

Products

Exploited and recent CVEs

• CVE-2026-44267 Critical 9.8 Elo: Sandbox escape to arbitrary Node.js / browser code execution via unfiltered `.constructor` member access in Elo JavaScript emitter 0.8%
• CVE-2026-44266 Critical 9.8 Elo: Remote Code Execution in Elo Ruby backend via unescaped `#{...}` interpolation in emitted string literals and subtype-constraint labels 1.0%
• CVE-2026-44265 High 7.4 Elo: Code injection in Elo backends via unvalidated emission of programmatic AST fields 0.2%