CVE-2026-44266 - Elo: Remote Code Execution in Elo Ruby backend via unescaped `#{...}` interpolation in emitted string literals and subtype-constraint labels
CVE ID :CVE-2026-44266 Published : Nov. 3, 2026, 6:18 p.m. | 46 minutes ago Description :Elo is a purely functional expression language for no-code tools. Prior to 1.0.1, the Ruby backend in src/compilers/ruby.ts embeds attacker-controlled text in Ruby double-quoted strings without escaping...