CVE-2025-3192
1 advisory.
Packagist/spatie/browsershot CVE-2025-3192: high 8.2
Browsershot Server-Side Request Forgery (SSRF) via setURL() Function
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 5.0.3 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-qw64-6vcc-8ghx
- https://nvd.nist.gov/vuln/detail/CVE-2025-3192
- https://gist.github.com/JunMing27/651998a34d57fbf71ff9d25386f1da0f
- https://github.com/spatie/browsershot
- https://security.snyk.io/vuln/SNYK-PHP-SPATIEBROWSERSHOT-8548015
CVE-2025-3192 · published · modified · JSON