Fixing a Path Traversal Vulnerability in image-downloader
How CVE-2026-103648, a critical path traversal (CWE-22) in image-downloader, was reported, fixed in 4.3.1 and covered by a regression test.
Engineer's notebook · since 2012
Code, Systems & AI
A personal engineering notebook about software, systems, infrastructure, AI and things worth understanding.

How CVE-2026-103648, a critical path traversal (CWE-22) in image-downloader, was reported, fixed in 4.3.1 and covered by a regression test.
A benchmark-driven look at Oremi Ohunerin 4.0.0.b11, covering audio inference performance, WebSocket concurrency, wake-word reliability, decoder isolation, and the French pronunciation study.
Orchestrating Docker Swarm and Compose deployments with hardware-aware placement, NFS storage and Traefik integration.
Build a multi-agent AI engineering workflow with DSH agent presets.
A deep performance investigation into moving the Oremi Izwi text-to-speech service to the GPU.
Fix Docker Swarm overlay networks failing with 'error creating vxlan interface: file exists'.
68 articles preserved with their original dates, from 2012 to 2026. No rewriting — just a clear view of what was learned and when.
Selected work from the portfolio, most recent activity first.
CallLink is a lightweight, privacy-oriented web application for creating temporary links for real-time calls.
An orchestrator for Docker Swarm and Compose deployments with device targeting and automated NFS storage provisioning
BlueGate is a Bluetooth gateway and device manager focused on exposing Bluetooth operations to external systems through a lightweight HTTP service.
MCP server for controlling Zigbee2MQTT smart home devices.
Filigrane is a modern application designed to apply elegant vector text or high-resolution image watermarks to PDF documents quickly and securely.
Pixie is a modern, lightweight image processor for everyday edits. It provides focused tools for cropping, resizing, cleaning metadata, removing backgrounds, …