Skip to content
OpenAdvisories

Vendor

demsking

1 known vulnerabilities.

Products

image-downloader 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.1
    CVE-2026-103648 Public exploit

    Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in image-downloader

    Path traversal in image-downloader 4.3.0 allows an attacker who can control the download URL to cause downloaded response data to be written outside the configured destination directory.

    demsking image-downloader