lacuscore (>=1.22.0, <=1.23.0) potentially affected by CVE-2026-63175 via playwrightcapture (1.38.0)

playwrightcapture PYPI version 1.38.0 is affected by a known vulnerability. The following packages have a transitive dependency on playwrightcapture and may be impacted: - lacuscore =1.22.0, =1.23.0 Source cves: CVE-2026-63175 Source advisory: SNYK:PYTHON-PLAYWRIGHTCAPTURE-18017912...

CVE-2026-63175

PlaywrightCapture stored capture-specific configuration and runtime data as mutable class-level variables rather than instance-level variables. Consequently, multiple Capture objects running within the same Python process could share state, including HTTP headers, cookies, browser storage, HTTP...

CVE-2026-63175 Cross-Capture Session Data Leakage Due to Shared Mutable State in Looklyloo - PlaywrightCapture

PlaywrightCapture stored capture-specific configuration and runtime data as mutable class-level variables rather than instance-level variables. Consequently, multiple Capture objects running within the same Python process could share state, including HTTP headers, cookies, browser storage, HTTP...

CVE-2026-63175 Cross-Capture Session Data Leakage Due to Shared Mutable State in Looklyloo - PlaywrightCapture

PlaywrightCapture stored capture-specific configuration and runtime data as mutable class-level variables rather than instance-level variables. Consequently, multiple Capture objects running within the same Python process could share state, including HTTP headers, cookies, browser storage, HTTP...

lacuscore (>=1.22.0, <=1.23.0) potentially affected by CVE-2026-63175 via playwrightcapture (1.38.0)

playwrightcapture PYPI version 1.38.0 is affected by a known vulnerability. The following packages have a transitive dependency on playwrightcapture and may be impacted: - lacuscore =1.22.0, =1.23.0 Source cves: CVE-2026-63175 Source advisory: MEND:CVE-2026-63175...

CVE-2026-63175

PlaywrightCapture has a vulnerability where capture-specific configuration and runtime data are stored as mutable class-level variables instead of instance-level vars on the Catchure object. This can allow multiple Capture objects in the same Python process to share state such as HTTP headers, co...

CVE-2026-63175: Insufficient Session Expiration

PlaywrightCapture stored capture-specific configuration and runtime data as mutable class-level variables rather than instance-level variables. Consequently, multiple Capture objects running within the same Python process could share state, including HTTP headers, cookies, browser storage, HTTP...

CVE-2026-44439

PlaywrightCapture is a simple replacement for splash using playwright. Prior to 1.39.6, PlaywrightCapture did not sufficiently restrict navigations and resource requests initiated by rendered pages. An attacker-controlled page could abuse browser-side redirection mechanisms, such as...

CVE-2026-44439

PlaywrightCapture is a simple replacement for splash using playwright. Prior to 1.39.6, PlaywrightCapture did not sufficiently restrict navigations and resource requests initiated by rendered pages. An attacker-controlled page could abuse browser-side redirection mechanisms, such as...

PYSEC-2026-2259

PlaywrightCapture is a simple replacement for splash using playwright. Prior to 1.39.6, PlaywrightCapture did not sufficiently restrict navigations and resource requests initiated by rendered pages. An attacker-controlled page could abuse browser-side redirection mechanisms, such as...

PYSEC-2026-2259

PlaywrightCapture is a simple replacement for splash using playwright. Prior to 1.39.6, PlaywrightCapture did not sufficiently restrict navigations and resource requests initiated by rendered pages. An attacker-controlled page could abuse browser-side redirection mechanisms, such as...

lacuscore (>=1.22.0, <=1.23.0) potentially affected by CVE-2026-44439 via playwrightcapture (1.38.0)

playwrightcapture PYPI version 1.38.0 is affected by a known vulnerability. The following packages have a transitive dependency on playwrightcapture and may be impacted: - lacuscore =1.22.0, =1.23.0 Source cves: CVE-2026-44439 Source advisory: OSV:PYSEC-2026-2259...

CVE-2026-44439 LookyLoo - PlaywrightCapture permits access to local files and internal network resources during page capture

PlaywrightCapture is a simple replacement for splash using playwright. Prior to 1.39.6, PlaywrightCapture did not sufficiently restrict navigations and resource requests initiated by rendered pages. An attacker-controlled page could abuse browser-side redirection mechanisms, such as...

CVE-2026-44439

PlaywrightCapture is a simple replacement for splash using playwright. Prior to 1.39.6, PlaywrightCapture did not sufficiently restrict navigations and resource requests initiated by rendered pages. An attacker-controlled page could abuse browser-side redirection mechanisms, such as...

CVE-2026-44439 LookyLoo - PlaywrightCapture permits access to local files and internal network resources during page capture

PlaywrightCapture is a simple replacement for splash using playwright. Prior to 1.39.6, PlaywrightCapture did not sufficiently restrict navigations and resource requests initiated by rendered pages. An attacker-controlled page could abuse browser-side redirection mechanisms, such as...

CVE-2026-44439

PlaywrightCapture is a simple replacement for splash using playwright. Prior to 1.39.6, PlaywrightCapture did not sufficiently restrict navigations and resource requests initiated by rendered pages. An attacker-controlled page could abuse browser-side redirection mechanisms, such as...

lacuscore (>=1.22.0, <=1.23.0) potentially affected by CVE-2026-44439 via playwrightcapture (1.38.0)

playwrightcapture PYPI version 1.38.0 is affected by a known vulnerability. The following packages have a transitive dependency on playwrightcapture and may be impacted: - lacuscore =1.22.0, =1.23.0 Source cves: CVE-2026-44439 Source advisory: MEND:CVE-2026-44439...

CVE-2026-44439: Server-Side Request Forgery (SSRF)

PlaywrightCapture is a simple replacement for splash using playwright. Prior to 1.39.6, PlaywrightCapture did not sufficiently restrict navigations and resource requests initiated by rendered pages. An attacker-controlled page could abuse browser-side redirection mechanisms, such as...

lacuscore (>=1.22.0, <=1.23.0) potentially affected by CVE-2026-44439 via playwrightcapture (1.38.0)

playwrightcapture PYPI version 1.38.0 is affected by a known vulnerability. The following packages have a transitive dependency on playwrightcapture and may be impacted: - lacuscore =1.22.0, =1.23.0 Source cves: CVE-2026-44439 Source advisory: OSV:GHSA-687H-XW6F-Q2QW...

Server-side Request Forgery (SSRF)

Overview PlaywrightCapture is an A simple library to capture websites using playwright Affected versions of this package are vulnerable to Server-side Request Forgery SSRF in the capture process. An attacker can access internal network resources or local files by supplying a crafted URL that...