Skip to content
OpenAdvisories

Vendor

datalab-to

2 known vulnerabilities.

Products

marker 1 surya 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.5
    CVE-2026-85687

    surya 0.22.1 Unauthenticated Arbitrary File Read via screenshot server

    surya 0.22.1 screenshot server contains an unauthenticated arbitrary file read vulnerability in the /info, /page, and /process routes that accept raw file_path parameters. Attackers can read any image or PDF file on the host by supplying arbitrary file paths …

    datalab-to surya