[MEDIUM] WWBN AVideo has an Incomplete fix: Directory traversal bypass via query string in ReceiveImage downloadURL parameters

PKSA-pt2z-fxr4-fvmc CVE-2026-41062 GHSA-m63r-m9jh-3vc6

Affected package: wwbn/avideo

Affected version: <=29.0

Reported by:
GitHub