anionex vulnerabilities

Products

• anionex/banana-slides 1

Latest anionex CVEs

Newest publication first

1. CVE-2026-49136 Banana Slides 0.4.0 Path Traversal via generate_image() in ai_service.py

   Published 2026-06-01

   High·CVSS 8.7 EPSS 0.42%

   Banana Slides through 0.4.0, patched in commit e8bc490, contains a path traversal vulnerability in the generate_image() function within the AI service backend that allows unauthenticated attackers to read arbitrary image-format files outside the intended uploads directory by expl...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.