Paisa before 0.7.8 Path Traversal via Editor and Sheet API

These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.

CVE-2026-116067 · Microsoft / collected KEV context

cve-program · CVE-2026-116067

• https://github.com/ananthakumaran/paisa/issues/420
• https://github.com/ananthakumaran/paisa
• https://github.com/ananthakumaran/paisa/blob/v0.7.7/internal/server/editor.go#L49-L70
• https://github.com/ananthakumaran/paisa/commit/035949351f7c0d0f90ecf767aa1e28b4d5a0ae31
• https://github.com/ananthakumaran/paisa/releases/tag/v0.7.8
• https://www.vulncheck.com/advisories/paisa-before-0.7.8-path-traversal-via-editor-and-sheet-api

• Paisa before 0.7.8 Path Traversal via Editor and Sheet API · Newly collected advisory · 25 Oct 2026