https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-14T23:57:16.800581+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-355517 EUVD-2026-355517 2026-10-14T23:57:16.861224+00:00 EUVD-2026-355517 https://cve.radiocsirt.org/vuln/fkie_cve-2025-1026 fkie_cve-2025-1026 2026-10-14T23:57:16.861261+00:00

Versions of the package spatie/browsershot before 5.0.5 are vulnerable to Improper Input Validation due to improper URL validation through the setUrl method, which results in a Local File Inclusion allowing the attacker to read sensitive files. **Note:** This is a bypass of the fix for [CVE-2024-21549](https://security.snyk.io/vuln/SNYK-PHP-SPATIEBROWSERSHOT-8533023).

 https://cve.radiocsirt.org/vuln/ghsa-f2q5-6mx7-q9qq GHSA-f2q5-6mx7-q9qq — Browsershot Local File Inclusion 2026-10-14T23:57:16.861294+00:00

Affected: Packagist: spatie/browsershot

Versions of the package spatie/browsershot before 5.0.5 are vulnerable to Improper Input Validation due to improper URL validation through the setUrl method, which results in a Local File Inclusion allowing the attacker to read sensitive files.

**Note:**

This is a bypass of the fix for [CVE-2024-21549](https://security.snyk.io/vuln/SNYK-PHP-SPATIEBROWSERSHOT-8533023).