diem-project CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

LOW diem-project CVE published 2026-08-31

CVE-2026-82679

The CVE-2026-82679 vulnerability affects diem-project diem up to version 5.1.3, specifically in the dmFrontPlugin/lib/dmWidget/media/dmWidgetContentBaseMediaForm.php file of the Widget Editor component. This unrestricted upload vulnerability allows for remote attacks, potentially leading to security concerns. The CVSS score is 2.1, indicating a low severity. Users should review and verify the vulnerabilit [truncated]