Datalab-to vulnerabilities
Published CVEs affecting Datalab-to products: 2 record(s), with severity, exploitation and fixes.
CVE-2026-85687
High · 7.5
CWE-73 Sep 4, 2026
surya 0.22.1 Unauthenticated Arbitrary File Read via screenshot server
surya 0.22.1 screenshot server contains an unauthenticated arbitrary file read vulnerability in the /info, /page, and /process routes that accept raw file_path parameters. Attackers can read any image or PDF file on the host by supplying arbitrary file paths to Image.open or pypdfium2.PdfDocument, obtaining rendered contents as base64 and using /info as an existence oracle.
CVE-2026-85684
Critical · 9.1
CWE-73 Sep 4, 2026
marker through 2.0.0 Path Traversal via upload filename
marker through 2.0.0 contains a path traversal vulnerability in the FastAPI /marker/upload handler that fails to sanitize the file.filename parameter. Unauthenticated attackers can supply filenames containing directory traversal sequences to write arbitrary files to any location or delete existing files on the system.