CVE-2026-46643
1 advisory.
Packagist/KnpLabs/knp-snappy CVE-2026-46643: high, EPSS 0.21%
Snappy: Binary path is never shell-escaped due to an inverted is_executable check
Action: Upgrade KnpLabs/knp-snappy to 1.7.1 or later.
composer require KnpLabs/knp-snappy:1.7.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.7.1 | - |
Fixed versions
| 1.7.1 |
Sources
- osv: GHSA-vpr4-p6fq-85jc
- https://github.com/KnpLabs/snappy/security/advisories/GHSA-vpr4-p6fq-85jc
- https://nvd.nist.gov/vuln/detail/CVE-2026-46643
- https://github.com/KnpLabs/snappy
- https://github.com/KnpLabs/snappy/releases/tag/v1.7.1
CVE-2026-46643 · published · modified · JSON