CVE-2026-106103 | quasarframework icongenie up to 6.1.0 Profile Validation get-assets-files.js folder/name path traversal

October 6, 2026 Yanac

A vulnerability was found in quasarframework icongenie up to 6.1.0 and classified as problematic. This vulnerability affects unknown code of the file icongenie/lib/utils/get-assets-files.js of the component Profile Validation. Such manipulation of the argument folder/name leads to path traversal.

This vulnerability is uniquely identified as CVE-2026-106103. The attack can be launched remotely. No exploit exists.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More