Skip to content
OpenAdvisories

Product · spatie

browsershot

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.5
    CVE-2026-126779

    Spatie Browsershot 2.2.0 before 5.5.0 Local File Read via setHtml()

    Spatie Browsershot 2.2.0 before 5.5.0 contains a local file read vulnerability that allows attackers to read server files by supplying root-relative references in HTML passed to setHtml(). Attackers can embed iframe, img, link or script elements referencing p…

    spatie browsershot