CVE-2026-103648 — Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in image-downloader
Path traversal in image-downloader 4.3.0 allows an attacker who can control the download URL to cause downloaded response data to be written outside the configured destination d…
Published: 2026-10-02 · CVSS: 9.1 · CVSS 3.1
Path traversal in image-downloader 4.3.0 allows an attacker who can control the download URL to cause downloaded response data to be written outside the configured destination directory.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7