CVE-2026-117183: Path Traversal

Published Oct 30, 2026

Updated

A path traversal vulnerability in the FeaturedImage component of astro-notion-blog 0.13.0 allows attackers to escape the intended directory, as well as read and overwrite files on the server via a crafted URL.

Event History

Oct 30, 2026

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Data Sourced

via NVD·04:17 PM

DescriptionSeverityWeakness

Frequently Asked Questions

Who can exploit this issue?

An unauthenticated remote attacker can exploit it over the network by sending a crafted URL. No user interaction or prior privileges are required.

What is the potential impact?

The attacker may escape the intended directory and read or overwrite files on the server. The supplied severity vector indicates high confidentiality impact, with no stated integrity or availability impact.

Which version is identified as affected?

The vulnerability description identifies astro-notion-blog version 0.13.0. No fixed version or workaround is provided in the available data.

CVE-2026-117183: Path Traversal

Event History

Frequently Asked Questions

Who can exploit this issue?

What is the potential impact?

Which version is identified as affected?

Company

Resources

Contact

Frequently Asked Questions

Who can exploit this issue?

What is the potential impact?

Which version is identified as affected?