Vulnerabilities

TI-2026-34314 CVE-2026-46683 · GHSA-c5fp-p67m-gq56

Snappy: SSRF and local file read via the xsl-style-sheet option

LOW 36

Snappy is a PHP library allowing thumbnail, snapshot or PDF generation from a url or a html page.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00249 Published 2026-06-10 Fixed in 1.7.0 CWE-918

TI-2026-34294 CVE-2026-46643 · GHSA-vpr4-p6fq-85jc

HIGH 68

Snappy is a PHP library allowing thumbnail, snapshot or PDF generation from a url or a html page.

CVSS 4.0HIGH 7.5 Local No auth No interaction EPSS 0.002 Published 2026-06-10 Fixed in 1.7.1 CWE-78

TI-2023-21930 CVE-2023-41330 · GHSA-92rv-4j2h-8mjj

HIGH 82

knplabs/knp-snappy is a PHP library allowing thumbnail, snapshot or PDF generation from a url or a html page.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02287 Published 2023-09-06 Fixed in 1.4.3 CWE-502

TI-2023-12694 CVE-2023-28115 · GHSA-gq6w-q6wh-jggc

MEDIUM 54

Snappy is a PHP library allowing thumbnail, snapshot or PDF generation from a url or a html page.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0276 Published 2023-03-17 Fixed in 1.4.2 CWE-502