Vulnerabilities
VEX
CWE
KEV Catalogs
All catalogs
CIRCL
CISA
ENISA
Shadowserver
Previdian
Community
Sightings
Comments
Bundles
Organizations
Contributors
Disclosure
Vulnerability Disclosures
Statistics
Log in
About
Search term
Success
GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference -
Registration
← All credits
Chua Jian Shen
1 vulnerability record and advisories credit this contributor.
CVE-2025-1026
Versions of the package spatie/browsershot before 5.0.5 are vulnerable to Improper Input Validation due to improper URL validation through the setUrl method, which results in a Local File Inclusion allowing the attacker to read sensitive files. **Note:**