https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-04T21:13:01.458432+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/fkie_cve-2024-21549 fkie_cve-2024-21549 2026-10-04T21:13:02.328654+00:00

Versions of the package spatie/browsershot before 5.0.3 are vulnerable to Improper Input Validation due to improper URL validation in the setUrl method. An attacker can exploit this vulnerability by utilizing view-source:file://, which allows for arbitrary file reading on a local file. **Note:** This is a bypass of the fix for [CVE-2024-21544](https://security.snyk.io/vuln/SNYK-PHP-SPATIEBROWSERSHOT-8496745).

 https://vulnerability.circl.lu/vuln/ghsa-c9f5-29f6-c35w GHSA-c9f5-29f6-c35w — Browsershot Improper Input Validation vulnerability 2026-10-04T21:13:02.328756+00:00

Affected: Packagist: spatie/browsershot

Versions of the package spatie/browsershot before 5.0.3 are vulnerable to Improper Input Validation due to improper URL validation through the setUrl method. An attacker can exploit this vulnerability by utilizing view-source:file://, which allows for arbitrary file reading on a local file.

**Note:**

This is a bypass of the fix for [CVE-2024-21544](https://security.snyk.io/vuln/SNYK-PHP-SPATIEBROWSERSHOT-8496745).

 https://vulnerability.circl.lu/vuln/gsd-2024-21549 gsd-2024-21549 2026-10-04T21:13:02.328815+00:00 gsd-2024-21549