{"action":"Upgrade @jmondi/url-to-png to 2.1.2 or later.","affected":[{"fixed":"2.1.2","introduced":"0"}],"component":"@jmondi/url-to-png","cve_ids":["CVE-2024-39919"],"ecosystem":"npm","epss":0.00373,"exploited":false,"fixed_versions":["2.1.2"],"ghsa_id":"GHSA-342q-2mc2-5gmp","id":"tcs_01M5KEVV6X8VN6ED497ZWPJY3R","modified_at":"2026-09-10T03:50:16.201440765Z","published_at":"2024-07-15T17:47:00Z","references":["https://osv.dev/vulnerability/GHSA-342q-2mc2-5gmp","https://github.com/jasonraimondi/url-to-png/security/advisories/GHSA-342q-2mc2-5gmp","https://nvd.nist.gov/vuln/detail/CVE-2024-39919","https://github.com/jasonraimondi/url-to-png/commit/f62ff40403ffa1781459d6be8d97b8035888c00c","https://github.com/jasonraimondi/url-to-png"],"severity":{"label":"low","score":3.7},"sources":[{"source":"osv","source_id":"GHSA-342q-2mc2-5gmp","url":"https://osv.dev/vulnerability/GHSA-342q-2mc2-5gmp"}],"summary":"@jmondi/url-to-png enables capture screenshot of localhost web services (unauthenticated pages)"}