https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 11 Oct 2026 10:36:01 +0000 https://vulnerability.circl.lu/vuln/cve-2026-108603 <p><strong>Affected:</strong> addsumtech slide-maker</p> <p>slide-maker through 5.8.0 contains a path traversal vulnerability in generate_images_openai.py that allows attackers to write image files outside the output directory via manifest-supplied filenames. Attackers can influence deck source material so the image prompt manifest contains ../ or symlinked filenames, creating directories and overwriting existing files at arbitrary paths.</p> <p><strong>Affected:</strong> addsumtech slide-maker</p> <p>slide-maker through 5.8.0 contains a path traversal vulnerability in generate_images_openai.py that allows attackers to write image files outside the output directory via manifest-supplied filenames. Attackers can influence deck source material so the image prompt manifest contains ../ or symlinked filenames, creating directories and overwriting existing files at arbitrary paths.</p> https://vulnerability.circl.lu/vuln/cve-2026-108603