CVE-2026-46683
1 advisory.
Packagist/knplabs/knp-snappy CVE-2026-46683: medium
Snappy : SSRF and local file read via the xsl-style-sheet option
Action: Upgrade knplabs/knp-snappy to 1.7.0 or later.
composer require knplabs/knp-snappy:1.7.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.7.0 | - |
Fixed versions
| 1.7.0 |
Sources
- osv: GHSA-c5fp-p67m-gq56
- https://github.com/KnpLabs/snappy/security/advisories/GHSA-c5fp-p67m-gq56
- https://nvd.nist.gov/vuln/detail/CVE-2026-46683
- https://github.com/KnpLabs/snappy
- https://github.com/KnpLabs/snappy/releases/tag/v1.7.0
CVE-2026-46683 · published · modified · JSON