VULNERABILITY INTELLIGENCE

CVE-2026-46683

EPSS probability0.25%
CISA KEVNot currently listed
Published2026-06-10
Last modified2026-10-25

Description

Snappy is a PHP library allowing thumbnail, snapshot or PDF generation from a url or a html page. Prior to version 1.7.0, there is a SSRF and local file read vulnerability via the xsl-style-sheet option. This issue has been patched in version 1.7.0.

Weakness classification

  • security-advisories@github.com: CWE-918

Primary references