{"action":"Upgrade playwrightcapture to 1.39.6 or later.","affected":[{"fixed":"1.39.6","introduced":"0"}],"component":"playwrightcapture","cve_ids":["CVE-2026-44439"],"ecosystem":"PyPI","epss":0.00396,"exploited":false,"fixed_versions":["1.39.6"],"ghsa_id":"GHSA-687h-xw6f-q2qw","id":"tcs_01M5KGYCY9SP2TJWSEGN3G1Z9S","modified_at":"2026-07-13T07:15:36.368736131Z","published_at":"2026-05-13T22:16:44.850Z","references":["https://osv.dev/vulnerability/PYSEC-2026-2259","https://github.com/Lookyloo/PlaywrightCapture/security/advisories/GHSA-687h-xw6f-q2qw","https://github.com/Lookyloo/PlaywrightCapture/commit/49e289eba756e4fbac1322c33cfd111411562405"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"PYSEC-2026-2259","url":"https://osv.dev/vulnerability/PYSEC-2026-2259"}],"summary":"PlaywrightCapture is a simple replacement for splash using playwright. Prior to 1.39.6, PlaywrightCapture did not sufficiently restrict navigations and resource requests initiated by rendered pages. A"}