medium6.9
CVE-2026-46683
Snappy is a PHP library allowing thumbnail, snapshot or PDF generation from a url or a html page.
Impact
Snappy is a PHP library allowing thumbnail, snapshot or PDF generation from a url or a html page. Prior to version 1.7.0, there is a SSRF and local file read vulnerability via the xsl-style-sheet option. This issue has been patched in version 1.7.0.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| composer | knplabs/knp-snappy | <= 1.6.0 | 1.7.0 |