Dataelement Bisheng vulnerabilities

• dataelement bisheng BISHENG through 3.0.0-beta4 IDOR via /api/v1/knowledge/file_bbox CVE-2026-111363 7.1 HighOctober 15, 2026
• dataelement bisheng BISHENG Unauthenticated Server-Side Request Forgery via Workflow Report Callback CVE-2026-82285 8.8 HighAugust 28, 2026
• dataelement bisheng BISHENG Authenticated Arbitrary Python Code Execution via Workflow run_once CVE-2026-82278 8.7 HighAugust 28, 2026