https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-05T05:54:34.568713+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/fkie_cve-2025-1026 fkie_cve-2025-1026 2026-10-05T05:54:34.570963+00:00

Versions of the package spatie/browsershot before 5.0.5 are vulnerable to Improper Input Validation due to improper URL validation through the setUrl method, which results in a Local File Inclusion allowing the attacker to read sensitive files. **Note:** This is a bypass of the fix for [CVE-2024-21549](https://security.snyk.io/vuln/SNYK-PHP-SPATIEBROWSERSHOT-8533023).

 https://vulnerability.circl.lu/vuln/ghsa-f2q5-6mx7-q9qq GHSA-f2q5-6mx7-q9qq — Browsershot Local File Inclusion 2026-10-05T05:54:34.571028+00:00

Affected: Packagist: spatie/browsershot

Versions of the package spatie/browsershot before 5.0.5 are vulnerable to Improper Input Validation due to improper URL validation through the setUrl method, which results in a Local File Inclusion allowing the attacker to read sensitive files.

**Note:**

This is a bypass of the fix for [CVE-2024-21549](https://security.snyk.io/vuln/SNYK-PHP-SPATIEBROWSERSHOT-8533023).