paisa vulnerabilities

CVEs whose affected-version data names the paisa package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-116067High· 8.2

yesterday

Paisa before 0.7.8 Path Traversal via Editor and Sheet API

Paisa before 0.7.8 contains a path traversal vulnerability in the GetFile, GetSheet, DeleteBackups, and DeleteSheetBackups handlers that lets unauthenticated attackers read files and delete backups through ../ sequences in file names. At…

▾ Twilightananthakumaran · paisavia CVEORG