osv:CVE-2026-103648

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in image-downloader

none

Description

Path traversal in image-downloader 4.3.0 allows an attacker who can control the download URL to cause downloaded response data to be written outside the configured destination directory.

Source: OSV

Metrics

Show all metrics
Severity
none
no public PoC known
Published
2026-10-02 16:05 UTC