Skip to content
OpenAdvisories

Vendor

dataelement

3 known vulnerabilities.

Products

bisheng 3
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.2
    CVE-2026-82285

    BISHENG Unauthenticated Server-Side Request Forgery via Workflow Report Callback

    bisheng through 2.6.0-fix2 contains a server-side request forgery vulnerability in the POST /api/v1/workflow/report/callback endpoint that lacks authentication and applies no URL scheme restrictions or host filtering. Unauthenticated attackers can supply arbi…

    dataelement bisheng
  • High 8.8
    CVE-2026-82278

    BISHENG Authenticated Arbitrary Python Code Execution via Workflow run_once

    BISHENG before 2.6.0 contains a remote code execution vulnerability in the workflow run_once endpoint that allows authenticated users to execute arbitrary Python code. Attackers can submit crafted Code node definitions to the POST /api/v1/workflow/run_once en…

    dataelement bisheng