paisa vulnerabilities

1 known vulnerability in paisa from Ananthakumaran. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.2 High severity

  paisa: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2026-116067Oct 25, 2026AnanthakumaranEPSS 1.69%

  Paisa before 0.7.8 contains a path traversal vulnerability in the GetFile, GetSheet, DeleteBackups, and DeleteSheetBackups handlers that lets unauthenticated attackers read files and delete backups through ../ sequences in file names. Attackers can send crafte