Mmastodon TechnologyCybersecurity first seen 3 d ago, last 3 d ago, peak #9

High-severity path traversal flaw found in Paisa finance app

Original: 🚨 EUVD-2026-109381 📊 Score: 8.8/10 (CVSS v3.1) 📦 Product: paisa 🏢 Vendor: ananthakumaran 📅 Updated: 2026-10-25 📝 Paisa b

A new vulnerability, tracked as EUVD-2026-109381, has been published for Paisa, the personal finance software by developer ananthakumaran. Versions before 0.7.8 contain a path traversal flaw in the GetFile, GetSheet, DeleteBackups and DeleteSheetBackups handlers that allows unauthenticated attackers to access or delete files outside intended directories. The flaw carries a CVSS v3.1 score of 8.8, rated high severity. Users are advised to update to 0.7.8 or later.

Why now: The advisory was just published, prompting self-hosted users of the finance app to check whether they need to patch.

PaisaananthakumaranEUVD

Open on mastodon →

Evidence

• 🚨 EUVD-2026-109381 📊 Score: 8.8/10 (CVSS v3.1) 📦 Product: paisa 🏢 Vendor: ananthakumaran 📅 Updated: 2026-10-25 📝 Paisa before 0.7.8 contains a path traversal vulnerability in the GetFile, GetSheet, DeleteBackups, and DeleteSheetBackups handlers that lets unauthenticated… · EUVD_Bot · 2

API: https://socialmediatrends-api.osmike.com/v1/trends/3619740