Priority LOW 37
Lookyloo is a web interface that allows users to capture a website page and then display a tree of domains that call each other.
CVSS 4.0MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00394 · Published 2026-10-23 · Fixed in 1.39.4 CWE-233
Priority LOW 37
PlaywrightCapture contains a server-side request forgery (SSRF) vulnerability in its favicon retrieval functionality.
CVSS 4.0MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.0043 · Published 2026-09-03 · Partial fix · v1.41.2 CWE-918
Priority LOW 24
A Server-Side Request Forgery (SSRF) vulnerability existed in Lookyloo's PlaywrightCapture when the only_global_lookup option was enabled.
CVSS 4.0MEDIUM 5.1· Network · No auth · User interaction · EPSS 0.00468 · Published 2026-08-11 · Fixed in 1.40.6 CWE-918
Priority LOW 31
Lookyloo did not enforce limits on the decompressed size of uploaded capture archives and compressed HAR files.
CVSS 4.0MEDIUM 6.9· Network · No auth · User interaction · EPSS 0.00428 · Published 2026-07-28 · No fix listed CWE-400
Priority MEDIUM 42
A stored cross-site scripting vulnerability existed in the capture tree visualization page.
CVSS 4.0CRITICAL 9.2· Network · No auth · User interaction · EPSS 0.00444 · Published 2026-07-27 · No fix listed CWE-79
Priority LOW 32
PlaywrightCapture stored capture-specific configuration and runtime data as mutable class-level variables rather than instance-level variables.
CVSS 4.0HIGH 7.1· Network · Low privileges · No interaction · EPSS 0.00472 · Published 2026-07-15 · No fix listed CWE-613
Priority LOW 35
PlaywrightCapture is a simple replacement for splash using playwright.
CVSS 4.0MEDIUM 6.6· Network · No auth · No interaction · EPSS 0.00396 · Published 2026-05-13 · Fixed in 1.39.6 CWE-918
Priority LOW 23
Lookyloo is a web interface that allows users to capture a website page and then display a tree of domains that call each other.
CVSS 4.0MEDIUM 5.3· Network · No auth · User interaction · EPSS 0.00202 · Published 2025-12-02 · Fixed in 1.35.3 CWE-79
Priority LOW 24
Lookyloo is a web interface that allows users to capture a website page and then display a tree of domains that call each other.
CVSS 4.0MEDIUM 5.3· Network · No auth · User interaction · EPSS 0.00331 · Published 2025-12-02 · Fixed in 1.35.3 CWE-79
Priority LOW 23
Lookyloo is a web interface that allows users to capture a website page and then display a tree of domains that call each other.
CVSS 4.0MEDIUM 5.3· Network · No auth · User interaction · EPSS 0.00202 · Published 2025-12-02 · Fixed in 1.35.3 CWE-79
Priority MEDIUM 43
Lookyloo is a web interface that allows users to capture a website page and then display a tree of domains that call each other.
CVSS 4.0CRITICAL 9.4· Network · No auth · User interaction · EPSS 0.00401 · Published 2025-11-19 · Fixed in 1.35.1 CWE-79
THREATIST.IORead the docs