Demsking vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Demsking products: 1 record(s), with severity, exploitation and fixes.

Image-downloader 1

Exploited only (KEV) →

CVE-2026-103648 Critical · 9.1 CWE-22 Oct 2, 2026

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in image-downloader

Path traversal in image-downloader 4.3.0 allows an attacker who can control the download URL to cause downloaded response data to be written outside the configured destination directory.