A security update has been released to address a vulnerability in enspirit products.
The affected product is elo, and versions 1.0.0 and earlier are vulnerable. – This vulnerability is identified as CVE-2026-44267 and is described as a cross-site scripting (XSS; an attack that inserts malicious scripts into web pages) and code injection vulnerability.
The Vulnerability Patch is provided through the latest update, and elo version 1.0.1 or higher is recommended as the fixed version. – Users should update to the latest patched version following the instructions on the reference site.
