CVE-2026-44439
2 advisories.
PyPI/playwrightcapture CVE-2026-44439: high 7.5, EPSS 0.54%
Playwright Capture permits access to local files and internal network resources during page capture
Action: Upgrade playwrightcapture to 1.39.6 or later.
pip install playwrightcapture==1.39.6Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.39.6 | - |
Fixed versions
| 1.39.6 |
Sources
- osv: GHSA-687h-xw6f-q2qw
- https://github.com/Lookyloo/PlaywrightCapture/security/advisories/GHSA-687h-xw6f-q2qw
- https://nvd.nist.gov/vuln/detail/CVE-2026-44439
- https://github.com/Lookyloo/PlaywrightCapture/commit/49e289eba756e4fbac1322c33cfd111411562405
- https://github.com/Lookyloo/PlaywrightCapture
CVE-2026-44439 · published · modified · JSON
PyPI/playwrightcapture CVE-2026-44439: high 7.5, EPSS 0.54%
PlaywrightCapture is a simple replacement for splash using playwright. Prior to 1.39.6, PlaywrightCapture did not sufficiently restrict navigations and resource requests initiated by rendered pages. A
Action: Upgrade playwrightcapture to 1.39.6 or later.
pip install playwrightcapture==1.39.6Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.39.6 | - |
Fixed versions
| 1.39.6 |
Sources
- osv: PYSEC-2026-2259
- https://github.com/Lookyloo/PlaywrightCapture/security/advisories/GHSA-687h-xw6f-q2qw
- https://github.com/Lookyloo/PlaywrightCapture/commit/49e289eba756e4fbac1322c33cfd111411562405
CVE-2026-44439 · published · modified · JSON