TI-2026-36351 CVE-2026-49136 · GHSA-f757-35w9-6h9q
Banana Slides 0.4.0 Path Traversal via generate_image() in ai_service.py
Priority HIGH 77
Banana Slides through 0.4.0, patched in commit e8bc490, contains a path traversal vulnerability in the generate_image() function within the AI service backend that allows unauthenticated attackers to read arbitrary image…