Skip to main content
cve.nowby Sazabi
← npm
npmPackage

@jmondi/url-to-png

3 known vulnerabilities (2 medium, 1 low), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
3 · 2 medium, 1 low
Registry
npm

Advisories 3

  • Capture screenshot of localhost web services (unauthenticated pages) in @jmondi/url-to-png

    Affected: fixed in 2.1.2.

  • CVE-2024-39918Medium 4.3

    Path Traveral in @jmondi/url-to-png

    Affected: fixed in 2.1.2.

  • CVE-2024-37169Medium 5.3

    @jmondi/url-to-png arbitrary file read via Playwright's screenshot feature exploiting file wrapper

    Affected: fixed in 2.0.3.