Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: spatie/browsershot 5.0.5 Clear all filters
TI-2025-00864 CVE-2025-1022 · GHSA-j2gw-r24m-j2qw

Improper input validation in spatie/browsershot

Priority HIGH 77

Versions of the package spatie/browsershot before 5.0.5 are vulnerable to Improper Input Validation in the setHtml function, invoked by Browsershot::html(), which can be bypassed by omitting the slashes in the file URI (…

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00463 Published 2025-02-05 Fixed in 5.0.5 CWE-20
TI-2025-00868 CVE-2025-1026 · GHSA-f2q5-6mx7-q9qq

Improper input validation in spatie/browsershot

Priority HIGH 75

Versions of the package spatie/browsershot before 5.0.5 are vulnerable to Improper Input Validation due to improper URL validation through the setUrl method, which results in a Local File Inclusion allowing the attacker…

CVSS 4.0HIGH 7.7 Network No auth No interaction EPSS 0.00548 Published 2025-02-05 Fixed in 5.0.5 CWE-20