{"action":"Upgrade spatie/browsershot to 3.57.3 or later.","affected":[{"fixed":"3.57.3","introduced":"0"}],"component":"spatie/browsershot","cve_ids":["CVE-2022-41706"],"ecosystem":"Packagist","epss":0.00639,"exploited":false,"fixed_versions":["3.57.3"],"ghsa_id":"GHSA-8c2c-jxwj-jqgf","id":"tcs_01M5KEYX81VY7VGGAJWKVC9AEB","modified_at":"2025-04-29T16:12:48.563314Z","published_at":"2022-11-25T18:30:25Z","references":["https://osv.dev/vulnerability/GHSA-8c2c-jxwj-jqgf","https://nvd.nist.gov/vuln/detail/CVE-2022-41706","https://github.com/spatie/browsershot/commit/92cf16fc098211731f80d21687abeafbe2c457ad","https://fluidattacks.com/advisories/eminem","https://github.com/spatie/browsershot"],"severity":{"label":"high","score":8.2},"sources":[{"source":"osv","source_id":"GHSA-8c2c-jxwj-jqgf","url":"https://osv.dev/vulnerability/GHSA-8c2c-jxwj-jqgf"}],"summary":"Browsershot does not validate URL protocols passed to Browsershot URL method"}