CyberSecBulletin

Dataelement vulnerabilities

We track 2 vulnerabilities in Dataelement products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on August 28, 2026.

2vulnerabilities
0critical
2high
0exploited
8.5average CVSS score

Latest Dataelement vulnerabilities

  • 8.2 High severity

    bisheng: Server-Side Request Forgery

    CVE-2026-82285Dataelement

    bisheng through 2.6.0-fix2 contains a server-side request forgery vulnerability in the POST /api/v1/workflow/report/callback endpoint that lacks authentication and applies no URL scheme restrictions or host filtering. Unauthenticated attackers can supply arbit

  • 8.8 High severity

    bisheng: Improper Control of Generation of Code

    CVE-2026-82278DataelementEPSS 1.03%

    BISHENG before 2.6.0 contains a remote code execution vulnerability in the workflow run_once endpoint that allows authenticated users to execute arbitrary Python code. Attackers can submit crafted Code node definitions to the POST /api/v1/workflow/run_once end