Read the docs

datalab-to

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

datalab-to records in CISA KEV

No datalab-to vulnerabilities are listed in CISA KEV.

Records

2 records

TI-2026-58795 CVE-2026-85684 · GHSA-g3jg-rghx-7246

marker through 2.0.0 Path Traversal via upload filename

Priority HIGH 77

marker through 2.0.0 contains a path traversal vulnerability in the FastAPI /marker/upload handler that fails to sanitize the file.filename parameter.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.01104 Published 2026-09-04 No fix listed CWE-73
TI-2026-58798 CVE-2026-85687 · GHSA-756c-28v8-3vfp

surya 0.22.1 Unauthenticated Arbitrary File Read via screenshot server

Priority MEDIUM 44

surya 0.22.1 screenshot server contains an unauthenticated arbitrary file read vulnerability in the /info, /page, and /process routes that accept raw file_path parameters.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00508 Published 2026-09-04 No fix listed CWE-73
Open these records in search →