Banana Slides
Approved changes feed: RSS · Atom
cpe:2.3:a:anionex:banana-slides:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Anionex (818c3448-507c-541d-8967-5b25bff2cd6c) |
|---|---|
| Product | Banana Slides (d47c6679-af17-5a5c-8a93-e2ca47e15ab5) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-49136 |
vulnerable | 2026-07-29 00:57:45.030399 |
Banana Slides 0.4.0 Path Traversal via generate_image() in ai_service.py
HIGH (7.5)
Banana Slides through 0.4.0, patched in commit e8bc490, contains a path traversal vulnerability in the generate_image() function within the AI service backend that allows unauthenticated attackers to read arbitrary image-format files outside the intended uploads directory by exploiting an incomplete path prefix check using os.path.startswith() without a trailing separator. Attackers can supply crafted markdown image references in user-controlled page descriptions that resolve to sibling directories whose names share the uploads folder prefix, bypassing the directory confinement check and causing the application to read files from unintended locations via PIL Image.open().
Published: 2026-06-01T19:09:51.443Z
Updated: 2026-07-14T21:33:19.249Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.