Demsking Image-downloader vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Demsking Image-downloader: 1 record(s), with affected versions and fixes.

CVE-2026-103648 Critical · 9.1 CWE-22 Oct 2, 2026

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in image-downloader

Path traversal in image-downloader 4.3.0 allows an attacker who can control the download URL to cause downloaded response data to be written outside the configured destination directory.