Vulnerabilities

TI-2024-26812 CVE-2024-39919 · GHSA-342q-2mc2-5gmp

Capture screenshot of localhost web services (unauthenticated pages) in @jmondi/url-to-png

MEDIUM 48

@jmondi/url-to-png is an open source URL to PNG utility featuring parallel rendering using Playwright for screenshots and with storage caching via Local, S3, or CouchDB.

CVSS 3.1LOW 3.1 Network Low privileges No interaction EPSS 0.00373 Published 2024-07-15 Fixed in 2.1.1, 2.1.2 CWE-200

TI-2024-26811 CVE-2024-39918 · GHSA-vvmv-wrvp-9gjr

Path Traveral in @jmondi/url-to-png

MEDIUM 53

@jmondi/url-to-png is an open source URL to PNG utility featuring parallel rendering using Playwright for screenshots and with storage caching via Local, S3, or CouchDB.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00528 Published 2024-07-15 Fixed in 2.1.2 CWE-22

TI-2024-24696 CVE-2024-37169 · GHSA-665w-mwrr-77q3

@jmondi/url-to-png arbitrary file read via Playwright's screenshot feature exploiting file wrapper

LOW 31

@jmondi/url-to-png is a self-hosted URL to PNG utility.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00529 Published 2024-06-10 Fixed in 2.0.3 CWE-22

Vulnerabilities

Filters

Capture screenshot of localhost web services (unauthenticated pages) in @jmondi/url-to-png

Path Traveral in @jmondi/url-to-png

@jmondi/url-to-png arbitrary file read via Playwright's screenshot feature exploiting file wrapper