7 matches found
CVE-2026-44439
PlaywrightCapture is a simple replacement for splash using playwright. Prior to 1.39.6, PlaywrightCapture did not sufficiently restrict navigations and resource requests initiated by rendered pages. An attacker-controlled page could abuse browser-side redirection mechanisms, such as...
CVE-2026-44439
PlaywrightCapture is a simple replacement for splash using playwright. Prior to 1.39.6, PlaywrightCapture did not sufficiently restrict navigations and resource requests initiated by rendered pages. An attacker-controlled page could abuse browser-side redirection mechanisms, such as...
CVE-2026-44439
PlaywrightCapture is a simple replacement for splash using playwright. Prior to 1.39.6, PlaywrightCapture did not sufficiently restrict navigations and resource requests initiated by rendered pages. An attacker-controlled page could abuse browser-side redirection mechanisms, such as...
CVE-2026-44439 LookyLoo - PlaywrightCapture permits access to local files and internal network resources during page capture
PlaywrightCapture is a simple replacement for splash using playwright. Prior to 1.39.6, PlaywrightCapture did not sufficiently restrict navigations and resource requests initiated by rendered pages. An attacker-controlled page could abuse browser-side redirection mechanisms, such as...
lacuscore (>=1.8.8 <=1.23.0) potentially affected by CVE-2026-44439 via playwrightcapture (>=1.27.5 <=1.38.0)
playwrightcapture PYPI version =1.27.5, =1.8.8, =1.23.0 Source cves: CVE-2026-44439 Source advisory: SNYK:PYTHON-PLAYWRIGHTCAPTURE-16635355...
lacuscore (>=1.8.8 <=1.23.0) potentially affected by CVE-2026-44439 via playwrightcapture (>=1.27.5 <=1.38.0)
playwrightcapture PYPI version =1.27.5, =1.8.8, =1.23.0 Source cves: CVE-2026-44439 Source advisory: OSV:GHSA-687H-XW6F-Q2QW...
Server-side Request Forgery (SSRF)
Overview PlaywrightCapture is an A simple library to capture websites using playwright Affected versions of this package are vulnerable to Server-side Request Forgery SSRF in the capture process. An attacker can access internal network resources or local files by supplying a crafted URL that...