7 matches found
CVE-2026-44439
PlaywrightCapture is a simple replacement for splash using playwright. Prior to 1.39.6, PlaywrightCapture did not sufficiently restrict navigations and resource requests initiated by rendered pages. An attacker-controlled page could abuse browser-side redirection mechanisms, such as...
CVE-2026-44439
PlaywrightCapture is a simple replacement for splash using playwright. Prior to 1.39.6, PlaywrightCapture did not sufficiently restrict navigations and resource requests initiated by rendered pages. An attacker-controlled page could abuse browser-side redirection mechanisms, such as...
CVE-2026-44439
PlaywrightCapture is a simple replacement for splash using playwright. Prior to 1.39.6, PlaywrightCapture did not sufficiently restrict navigations and resource requests initiated by rendered pages. An attacker-controlled page could abuse browser-side redirection mechanisms, such as...
CVE-2026-44439 LookyLoo - PlaywrightCapture permits access to local files and internal network resources during page capture
PlaywrightCapture is a simple replacement for splash using playwright. Prior to 1.39.6, PlaywrightCapture did not sufficiently restrict navigations and resource requests initiated by rendered pages. An attacker-controlled page could abuse browser-side redirection mechanisms, such as...
lacuscore (>=0.1.0 <=1.24.7) potentially affected by CVE-2026-44439 via playwrightcapture (>=1.27.5 <=1.39.12)
playwrightcapture PYPI version =1.27.5, =0.1.0, =1.24.7 Source cves: CVE-2026-44439 Source advisory: OSV:GHSA-687H-XW6F-Q2QW...
Server-side Request Forgery (SSRF)
Overview PlaywrightCapture is an A simple library to capture websites using playwright Affected versions of this package are vulnerable to Server-side Request Forgery SSRF in the capture process. An attacker can access internal network resources or local files by supplying a crafted URL that...
lacuscore (>=0.1.0 <=1.24.7) potentially affected by CVE-2026-44439 via playwrightcapture (>=1.27.5 <=1.39.12)
playwrightcapture PYPI version =1.27.5, =0.1.0, =1.24.7 Source cves: CVE-2026-44439 Source advisory: SNYK:PYTHON-PLAYWRIGHTCAPTURE-16635355...