Critical severity9.1NVD Advisory· Published Oct 2, 2026
CVE-2026-103648
CVE-2026-103648
Description
Path traversal in image-downloader 4.3.0 allows an attacker who can control the download URL to cause downloaded response data to be written outside the configured destination directory.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
1- Range: <4.3.0
Patches
Vulnerability mechanics
References
1News mentions
0No linked articles in our index yet.