CVE-2022-41706
1 advisory.
Packagist/spatie/browsershot CVE-2022-41706: high 8.2
Browsershot does not validate URL protocols passed to Browsershot URL method
Action: Upgrade spatie/browsershot to 3.57.3 or later.
composer require spatie/browsershot:3.57.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 3.57.3 | - |
Fixed versions
| 3.57.3 |
Sources
- osv: GHSA-8c2c-jxwj-jqgf
- https://nvd.nist.gov/vuln/detail/CVE-2022-41706
- https://github.com/spatie/browsershot/commit/92cf16fc098211731f80d21687abeafbe2c457ad
- https://fluidattacks.com/advisories/eminem
- https://github.com/spatie/browsershot
CVE-2022-41706 · published · modified · JSON