CVE-2026-75333
yx-image-recognition v1.0 is vulnerable to Path Traversal. Parameters such as dir, filePath are directly passed to new File() for file system operations without any path sanitization or whitelist validation.
- Published Aug 26, 2026
- CVSS 7.5 high
- 0.5% chance of exploitation in the next 30 days (EPSS)