CVE-2026-117183

None

CVSS

—

EPSS

—

Published

Oct 30, 2026

CISA due date

—

The record

A path traversal vulnerability in the FeaturedImage component of astro-notion-blog 0.13.0 allows attackers to escape the intended directory, as well as read and overwrite files on the server via a crafted URL.

Affected packages

Ecosystem	Package	Introduced	Fixed