{"uuid": "27f8f506-70d6-4db6-9c63-45fd05a74d8c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-51859", "type": "seen", "source": "https://gist.github.com/Ro1ME/df160925a60dd917550f7c87bfe62519", "content": "# CVE-2026-51859\n\n**Type:** Directory Traversal\n**Product:** bisheng\n**Affected versions:** 2.3.0\u20132.4.0-beta1\n**Affected component:** `src/backend/bisheng/core/cache/utils.py:save_download_file`\n**Reference:** https://github.com/dataelement/bisheng/issues/1994\n\n## Description\n\nbisheng 2.3.0, 2.4.0, and 2.4.0-beta1 is vulnerable to directory traversal in save_download_file (src/backend/bisheng/core/cache/utils.py:290).\n\n## Discoverer\n\nRo1ME\n", "creation_timestamp": "2026-09-26T04:02:23.000000Z"}