https://afa.demanou.com/tags/open-source/Open Source · A personal engineering notebook about software, systems, infrastructure, AI and things worth understanding.en© 2026 Afa'Sébastien DemanouHugoSun, 04 Oct 2026 01:12:41 +0000https://afa.demanou.com/posts/2026/fixing-a-path-traversal-vulnerability-in-image-downloader/https://afa.demanou.com/posts/2026/fixing-a-path-traversal-vulnerability-in-image-downloader/Sat, 03 Oct 2026 08:15:00 +0000Security, Node.js, Open SourceHow CVE-2026-103648, a critical path traversal (CWE-22) in image-downloader, was reported, fixed in 4.3.1 and covered by a regression test.