{"uuid": "75097cad-64dd-4ecb-8fb8-2e4c9eafd44a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-51861", "type": "seen", "source": "https://gist.github.com/Ro1ME/a03814bf661b36823c3ef5e32af93298", "content": "# CVE-2026-51861\n\n**Type:** Code Injection\n**Product:** bisheng\n**Affected versions:** 2.3.0\u20132.4.0-beta1\n**Affected component:** `src/backend/bisheng/api/v1/validate.py:post_validate_code`\n**Reference:** https://github.com/dataelement/bisheng/issues/1995\n\n## Description\n\nbisheng 2.3.0, 2.4.0, and 2.4.0-beta1 is vulnerable to Code Injection in src/backend/bisheng/api/v1/validate.py.\n\n## Discoverer\n\nRo1ME\n", "creation_timestamp": "2026-09-26T04:02:31.000000Z"}