Description
bisheng 2.3.0, 2.4.0, and 2.4.0-beta1 is vulnerable to directory traversal in save_download_file (src/backend/bisheng/core/cache/utils.py:290).
Critical · 9.1
CVE-2026-51859
EUVD-2026-90421GHSA-vx7w-p635-5ppx
bisheng 2.3.0, 2.4.0, and 2.4.0-beta1 is vulnerable to directory traversal in save_download_file (src/backend/bisheng/core/cache/utils.py:2…
Published Sep 30, 2026 · Updated Oct 1, 2026 · Assigned by mitre