image-downloader vulnerabilities

CVEs whose affected-version data names the image-downloader package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-103648Critical· 9.1

Path traversal in image-downloader 4.3.0 allows an attacker who can control the download URL to cause downloaded response data to be written outside the configured destination directory.

Path traversal in image-downloader 4.3.0 allows an attacker who can control the download URL to cause downloaded response data to be written outside the configured destination directory.

▾ Midnightdemsking · image-downloadervia NVD

image-downloader vulnerabilities (CVEs) · VulnSea