CVE-2026-44265

The Elo expression language for no-code tools (versions prior to 1.0.1 ) contains a vulnerability in its programmatic AST API . The system fails to perform runtime syntax validation when interpolating arbitrary values from JSON-deserialized input , plugin outputs, or other untyped sources into ge...

EUVD-2026-116108

Elo is a purely functional expression language for no-code tools. Prior to 1.0.1, Elo's programmatic AST API accepts arbitrary values from JSON-deserialized input, plugin output, or other untyped sources and interpolates them into generated JavaScript, Ruby, Python, or SQL without runtime syntax...