Search Results (2 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-51906 1 Taskingai 1 Taskingai 2026-10-04 N/A
In TaskingAI v0.3.0 in the DALL-E 3 image generation tool save_url_image function, a path traversal vulnerability allows attackers to write downloaded images to arbitrary locations on the server filesystem by manipulating the project_id parameter.
CVE-2026-51907 1 Taskingai 1 Taskingai 2026-10-04 8.1 High
In TaskingAI v0.3.0 in the QR Code Generator plugin save_base64_image function, a path traversal vulnerability allows attackers to write image files to arbitrary locations on the server filesystem by manipulating the project_id parameter.