Paisa < 0.7.8 - Unauthenticated Path Traversal

Paisa 0.7.8 contains a path traversal vulnerability caused by improper sanitization of file names in GetFile, GetSheet, DeleteBackups, and DeleteSheetBackups handlers, letting unauthenticated attackers read arbitrary files and delete backups via ../ sequences. id: CVE-2026-116067 info: name: Pais...