jasonraimondi

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

jasonraimondi records in CISA KEV

No jasonraimondi vulnerabilities are listed in CISA KEV.

Records

3 records

TI-2024-26811 CVE-2024-39918 · GHSA-vvmv-wrvp-9gjr

Path Traveral in @jmondi/url-to-png

MEDIUM 53

@jmondi/url-to-png is an open source URL to PNG utility featuring parallel rendering using Playwright for screenshots and with storage caching via Local, S3, or CouchDB.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00528 Published 2024-07-15 Fixed in 2.1.2 CWE-22

TI-2024-26812 CVE-2024-39919 · GHSA-342q-2mc2-5gmp

Capture screenshot of localhost web services (unauthenticated pages) in @jmondi/url-to-png

MEDIUM 48

@jmondi/url-to-png is an open source URL to PNG utility featuring parallel rendering using Playwright for screenshots and with storage caching via Local, S3, or CouchDB.

CVSS 3.1LOW 3.1 Network Low privileges No interaction EPSS 0.00373 Published 2024-07-15 Fixed in 2.1.1, 2.1.2 CWE-200

TI-2024-24696 CVE-2024-37169 · GHSA-665w-mwrr-77q3

@jmondi/url-to-png arbitrary file read via Playwright's screenshot feature exploiting file wrapper

LOW 31

@jmondi/url-to-png is a self-hosted URL to PNG utility.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00529 Published 2024-06-10 Fixed in 2.0.3 CWE-22

Open these records in search →

Critical	0
High	0
Medium	2
Low	1
No CVSS	0