Skip to content
OpenAdvisories
Critical · 10.0 CVE-2026-24815 EUVD-2026-4764GHSA-mhvc-rf83-29wq

A XStream Security Vulnerability in XML Deserialization in datavane/tis

Published Jan 27, 2026 · Updated Jan 27, 2026 · Assigned by GovTech CSG

Description

Unrestricted Upload of File with Dangerous Type, Deserialization of Untrusted Data vulnerability in datavane tis (tis-plugin/src/main/java/com/qlangtech/tis/extension/impl modules). This vulnerability is associated with program files XmlFile.Java.

This issue affects tis: before v4.3.0.

Affected products

VendorProductAffectedFixed
datavane tis — —

References