90 matches found
CLSA-2026-1768956702 TuxCare security update for spatie/browsershot (5 CVEs)
TuxCare rebuilt spatie/browsershot to address 5 CVEs. Fixed in 3.61.0-p1+tuxcare...
CLSA-2026-1771289500 TuxCare security update for spatie/browsershot (1 CVE)
TuxCare rebuilt spatie/browsershot to address 1 CVE. Fixed in 4.4.0-p1+tuxcare...
CLSA-2026-1771289503 TuxCare security update for spatie/browsershot (1 CVE)
TuxCare rebuilt spatie/browsershot to address 1 CVE. Fixed in 3.61.0-p2+tuxcare...
CLSA-2026-1777509609 TuxCare security update for spatie/browsershot (5 CVEs)
TuxCare rebuilt spatie/browsershot to address 5 CVEs. Fixed in 4.4.0-p2+tuxcare...
PT-2026-73759
TuxCare rebuilt spatie/browsershot to address 1 CVE. Fixed in 4.4.0-p1+tuxcare...
PT-2026-73760
TuxCare rebuilt spatie/browsershot to address 1 CVE. Fixed in 3.61.0-p2+tuxcare...
PT-2026-73711
TuxCare rebuilt spatie/browsershot to address 5 CVEs. Fixed in 3.61.0-p1+tuxcare...
PT-2026-74655
TuxCare rebuilt spatie/browsershot to address 5 CVEs. Fixed in 4.4.0-p2+tuxcare...
CVE-2025-1026
Versions of the package spatie/browsershot before 5.0.5 are vulnerable to Improper Input Validation due to improper URL validation through the setUrl method, which results in a Local File Inclusion allowing the attacker to read sensitive files. Note: This is a bypass of the fix for CVE-2024-21549...
CVE-2025-1022
Versions of the package spatie/browsershot before 5.0.5 are vulnerable to Improper Input Validation in the setHtml function, invoked by Browsershot::html, which can be bypassed by omitting the slashes in the file URI e.g., file:../../../../etc/passwd. This is due to missing validations of the use...
EUVD-2025-0240
Malicious code in bioql PyPI...
EUVD-2024-3576
Malicious code in bioql PyPI...
EUVD-2024-3613
Malicious code in bioql PyPI...
EUVD-2022-5235
Malicious code in bioql PyPI...
EUVD-2025-9704
Malicious code in bioql PyPI...
EUVD-2024-3469
Malicious code in bioql PyPI...
Server Side Request Forgery (SSRF)
spatie/browsershot is vulnerable to Server-side Request Forgery SSRF. The vulnerability is due to a missing restriction on user input in the setUrl function, allowing attackers to access localhost and list its directories...
CVE-2025-3192
Versions of the package spatie/browsershot from 0.0.0 are vulnerable to Server-side Request Forgery SSRF in the setUrl function due to a missing restriction on user input, enabling attackers to access localhost and list all of its directories...
CVE-2025-3192
Versions of the package spatie/browsershot from 0.0.0 are vulnerable to Server-side Request Forgery SSRF in the setUrl function due to a missing restriction on user input, enabling attackers to access localhost and list all of its directories...
CVE-2025-3192
Versions of the package spatie/browsershot from 0.0.0 are vulnerable to Server-side Request Forgery SSRF in the setUrl function due to a missing restriction on user input, enabling attackers to access localhost and list all of its directories...