PlaywrightCapture vulnerabilities
2 known vulnerabilities in PlaywrightCapture from Lookyloo. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
2vulnerabilities
0critical
2high
0exploited
7.3average CVSS score
Latest first
- 7.1 High severity
PlaywrightCapture stored capture-specific configuration and runtime data as mutableā¦
PlaywrightCapture stored capture-specific configuration and runtime data as mutable class-level variables rather than instance-level variables. Consequently, multiple Capture objects running within the same Python process could share state, including HTTP head
- 7.5 High severity
PlaywrightCapture: Server-Side Request Forgery
PlaywrightCapture is a simple replacement for splash using playwright. Prior to 1.39.6, PlaywrightCapture did not sufficiently restrict navigations and resource requests initiated by rendered pages. An attacker-controlled page could abuse browser-side redirect