spatie/browsershot

HIGH8.2 4 Apr 2025

Browsershot Server-Side Request Forgery (SSRF) via setURL() Function

GHSA-qw64-6vcc-8ghx · CVE-2025-3192

Affected

≤ 5.0.3

Fixed in

no fix yet

Published

4 Apr 2025

HIGH8.2 5 Feb 2025

Browsershot Path Traversal

GHSA-j2gw-r24m-j2qw · CVE-2025-1022

Affected

< 5.0.5

Fixed in

5.0.5

Published

5 Feb 2025

MODERATE8.6 5 Feb 2025

Browsershot Local File Inclusion

GHSA-f2q5-6mx7-q9qq · CVE-2025-1026

Affected

< 5.0.5

Fixed in

5.0.5

Published

5 Feb 2025

MODERATE8.6 20 Dec 2024

Browsershot Improper Input Validation vulnerability

GHSA-c9f5-29f6-c35w · CVE-2024-21549

Affected

< 5.0.3

Fixed in

5.0.3

Published

20 Dec 2024

HIGH7.5 18 Dec 2024

Spatie Browsershot Directory Traversal vulnerability

GHSA-v528-6rq9-h6gw · CVE-2024-21547

Affected

< 5.0.2

Fixed in

5.0.2

Published

18 Dec 2024

MODERATE8.6 13 Dec 2024

Browsershot Local File Inclusion

GHSA-g2r4-phv7-5fgv · CVE-2024-21544

Affected

< 5.0.1

Fixed in

5.0.1

Published

13 Dec 2024

MODERATE6.1 25 Nov 2022

Browsershot vulnerable to Cross-Site Scripting (XSS)

GHSA-82h9-v8vh-mfpq · CVE-2022-43983

Affected

< 3.57.3

Fixed in

3.57.3

Published

25 Nov 2022

MODERATE6.1 25 Nov 2022

Browsershot version 3.57.3 vulnerable to improper input validation

GHSA-6q49-35h6-rq2p · CVE-2022-43984

Affected

< 3.57.4

Fixed in

3.57.4

Published

25 Nov 2022

HIGH8.2 25 Nov 2022

Browsershot does not validate URL protocols passed to Browsershot URL method

GHSA-8c2c-jxwj-jqgf · CVE-2022-41706

Affected

< 3.57.3

Fixed in

3.57.3

Published

25 Nov 2022

MODERATE5.3 24 May 2022

browsershot local file inclusion vulnerability

GHSA-rv74-mh27-4jpv · CVE-2020-7790

Affected

< 3.40.1

Fixed in

3.40.1

Published

24 May 2022