- Latest release
- Not known: cve.now hasn't read this package's releases
- Newest unaffected release
- Not known without release data
- Advisories
- 10 · 9 high, 1 medium
- Registry
- Packagist
Advisories 10
- CVE-2025-3192High 8.8
Versions of the package spatie/browsershot from 0.0.0 are vulnerable to Server-side Request Forgery (SSRF) in the setUrl() function due to…
Affected: through 5.0.3.
- CVE-2025-1022High 8.8
Versions of the package spatie/browsershot before 5.0.5 are vulnerable to Improper Input Validation in the setHtml function, invoked by…
Affected: fixed in 5.0.5.
- CVE-2025-1026High 7.7
Versions of the package spatie/browsershot before 5.0.5 are vulnerable to Improper Input Validation due to improper URL validation through…
Affected: fixed in 5.0.5.
- CVE-2024-21549High 7.7
Versions of the package spatie/browsershot before 5.0.3 are vulnerable to Improper Input Validation due to improper URL validation in the…
Affected: fixed in 5.0.3.
- CVE-2024-21547High 8.7
Versions of the package spatie/browsershot before 5.0.2 are vulnerable to Directory Traversal due to URI normalisation in the browser…
Affected: fixed in 5.0.2.
- CVE-2024-21544High 7.7
Versions of the package spatie/browsershot before 5.0.1 are vulnerable to Improper Input Validation due to improper URL validation in the…
Affected: fixed in 5.0.1.
- CVE-2022-43984High 8.2
Browsershot 3.57.3 - Server Side XSS to LFR via HTML
Affected: versions 3.57.3; fixed in 3.57.4.
- CVE-2022-43983High 8.2
Browsershot 3.57.2 - Server Side XSS to LFR via HTML
Affected: versions 3.57.2; fixed in 3.57.3.
- CVE-2022-41706High 8.2
Browsershot 3.57.2 - Server Side XSS to LFR via URL
Affected: versions 3.57.2; fixed in 3.57.3.
- CVE-2020-7790Medium 5.3
Arbitrary File Read
Affected: fixed in 3.40.1.