CVE-2026-94049

MEDIUM 4.3

06ketan slideshot renderer.ts render_slides path traversal

CVSS Score

4.3

EPSS Score

0.0%

EPSS Percentile

0th

A flaw has been found in 06ketan slideshot up to 4.4.0. This impacts the function render_slides of the file packages/cli/src/renderer.ts. This manipulation of the argument htmlPath causes path traversal. The attack is possible to be carried out remotely. The exploit has been published and may be used. The project was informed of the problem early through an issue report but has not responded yet.

CWE	CWE-22
Vendor	06ketan
Product	slideshot
Published	Sep 20, 2026

Stay Ahead of the Next One

Get instant alerts for 06ketan slideshot

Be the first to know when new medium vulnerabilities affecting 06ketan slideshot are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:P/RL:X/RC:R

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Scope

Confidentiality

Integrity

Availability

Affected Versions

06ketan / slideshot

4.0 4.1 4.2 4.3 4.4.0

References

NVD ↗ CVE.org ↗ EPSS Data ↗

vuldb.com: https://vuldb.com/vuln/407978 vuldb.com: https://vuldb.com/vuln/407978/cti vuldb.com: https://vuldb.com/cve/CVE-2026-94049 vuldb.com: https://vuldb.com/submit/949515 github.com: https://github.com/06ketan/slideshot/issues/18 github.com: https://github.com/06ketan/slideshot/

Credits

🔍 Xh1Xxhg (VulDB User) VulDB CNA Team