CVE-2026-75333

Name of the Vulnerable Software and Affected Versions yx-image-recognition version 1.0

Description The software is subject to Path Traversal, a condition where an attacker can access files and directories outside the intended folder. This occurs because the parameters dir and filePath are passed directly to the new File() function for file system operations without undergoing path sanitization or whitelist validation.

Recommendations Update yx-image-recognition version 1.0 to a version that implements proper path sanitization and whitelist validation for the dir and filePath parameters.