Description
yx-image-recognition v1.0 is vulnerable to Path Traversal. Parameters such as dir, filePath are directly passed to new File() for file system operations without any path sanitization or whitelist validation.
High · 7.5
CVE-2026-75333
EUVD-2026-66804GHSA-79vg-vgp9-6vp9
yx-image-recognition v1.0 is vulnerable to Path Traversal. Parameters such as dir, filePath are directly passed to new File() for file syst…
Published Aug 26, 2026 · Updated Aug 27, 2026 · Assigned by mitre