CVE-2026-94049

A path traversal vulnerability exists in the 06ketan slideshot CLI (up to version 4.4.0 ). The flaw is in the render_slides function within packages/cli/src/renderer.ts, where an attacker can manipulate the htmlPath argument to traverse the file system. The attack vector is remote with low privil...

CVE-2026-94049 06ketan slideshot renderer.ts render_slides path traversal

A flaw has been found in 06ketan slideshot up to 4.4.0. This impacts the function renderslides of the file packages/cli/src/renderer.ts. This manipulation of the argument htmlPath causes path traversal. The attack is possible to be carried out remotely. The exploit has been published and may be...