https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-13T00:47:45.555646+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-343603 EUVD-2026-343603 2026-10-13T00:47:45.557742+00:00 EUVD-2026-343603 https://cve.radiocsirt.org/vuln/fkie_cve-2025-3192 fkie_cve-2025-3192 2026-10-13T00:47:45.557769+00:00

Versions of the package spatie/browsershot from 0.0.0 are vulnerable to Server-side Request Forgery (SSRF) in the setUrl() function due to a missing restriction on user input, enabling attackers to access localhost and list all of its directories.

 https://cve.radiocsirt.org/vuln/ghsa-qw64-6vcc-8ghx GHSA-qw64-6vcc-8ghx — Browsershot Server-Side Request Forgery (SSRF) via setURL() Function 2026-10-13T00:47:45.557797+00:00

Affected: Packagist: spatie/browsershot

Versions of the package spatie/browsershot from 0.0.0 to 5.0.3 are vulnerable to Server-side Request Forgery (SSRF) in the setUrl() function due to a missing restriction on user input, enabling attackers to access localhost and list all of its directories.