Dataelement Bisheng
2 CVEs affecting Dataelement Bisheng. Latest disclosed: 2026-08-28. Critical: 0, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-82278 | High | 8.8 | 2026-08-28 | BISHENG before 2.6.0 contains a remote code execution vulnerability in the workflow run_once endpoint that allows authenticated users to execute arbitrary Pyth… |
CVE-2026-82285 | High | 8.2 | 2026-08-28 | bisheng through 2.6.0-fix2 contains a server-side request forgery vulnerability in the POST /api/v1/workflow/report/callback endpoint that lacks authentication… |