Dataelement - vulnerabilities (CVEs)

3 CVEs in 1 products, 1 in the last 30 days, newest from 2026-10-15.

Products

• Bisheng - 3 CVEs

Newest CVEs of Dataelement

• CVE-2026-111363 - CVSS 7.1 (high), 2026-10-15: BISHENG through 3.0.0-beta4 contains an insecure direct object reference vulnerability that allows authenticated low-privileged users to read other users'…
• CVE-2026-82285 - CVSS 8.8 (high), 2026-08-28: bisheng through 2.6.0-fix2 contains a server-side request forgery vulnerability in the POST /api/v1/workflow/report/callback endpoint that lacks…
• CVE-2026-82278 - CVSS 8.8 (high), 2026-08-28: BISHENG before 2.6.0 contains a remote code execution vulnerability in the workflow run_once endpoint that allows authenticated users to execute arbitrary…