Skip to content
CVE PROGRAM SOURCE RECORD6.9 Medium

CVE-2026-46683

Snappy: SSRF and local file read via the xsl-style-sheet option

Description

Snappy is a PHP library allowing thumbnail, snapshot or PDF generation from a url or a html page. Prior to version 1.7.0, there is a SSRF and local file read vulnerability via the xsl-style-sheet option. This issue has been patched in version 1.7.0.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

KnpLabs snappy

  • < 1.7.0affected

References