CVE-2026-51859

bisheng 2.3.0, 2.4.0, and 2.4.0-beta1 is vulnerable to directory traversal in savedownloadfile src/backend/bisheng/core/cache/utils.py:290...

EUVD-2026-90421

bisheng 2.3.0, 2.4.0, and 2.4.0-beta1 is vulnerable to directory traversal in savedownloadfile src/backend/bisheng/core/cache/utils.py:290...

CVE-2026-51859

The bisheng software, specifically versions 2.3.0 , 2.4.0 , and 2.4.0-beta1 , is vulnerable to a directory traversal flaw. The vulnerability exists within the save_download_file function located at src/backend/bisheng/core/cache/utils.py:290. No specific impact details, remediation steps, or expl...