dataelement bisheng

• CVE-2026-111363 Medium 6.5 BISHENG through 3.0.0-beta4 IDOR via /api/v1/knowledge/file_bbox 0.3%
• CVE-2026-82285 High 8.2 BISHENG Unauthenticated Server-Side Request Forgery via Workflow Report Callback 0.5%
• CVE-2026-82278 High 8.8 BISHENG Authenticated Arbitrary Python Code Execution via Workflow run_once 1.0%