Search vulnerabilities

Results 1

Export CSV
CVE-2026-103648

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in image-downloader

Path traversal in image-downloader 4.3.0 allows an attacker who can control the download URL to cause downloaded response data to be written outside the configured destination directory.

CVSS 3.1 · 9.1 Critical EPSS < 1% KEV · Not listed
Vendors
Products