Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: datavane tis v4.3.0 Clear all filters
TI-2026-20015 CVE-2026-24816 · GHSA-237f-mxrr-mcvr

Cookie Security Vulnerabilities in datavane/tis

Priority MEDIUM 49

Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in datavane tis (tis-console/src/main/java/com/qlangtech/tis/runtime/module/action modules).

CVSS 4.0CRITICAL 10.0 Network No auth No interaction EPSS 0.00294 Published 2026-01-27 Fixed CWE-835
TI-2026-20014 CVE-2026-24815 · GHSA-mhvc-rf83-29wq

A XStream Security Vulnerability in XML Deserialization in datavane/tis

Priority MEDIUM 49

Unrestricted Upload of File with Dangerous Type, Deserialization of Untrusted Data vulnerability in datavane tis (tis-plugin/src/main/java/com/qlangtech/tis/extension/impl modules).

CVSS 4.0CRITICAL 10.0 Network No auth No interaction EPSS 0.00353 Published 2026-01-27 Fixed CWE-434