All products

knplabs/knp-snappy

Composer · Package
4 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Snappy: Binary path is never shell-escaped due to an inverted is_executable checkCVE-2026-46643 · GHSA-VPR4-P6FQ-85JC knplabs/knp-snappy Composer High Fix reported
Snappy : SSRF and local file read via the xsl-style-sheet optionCVE-2026-46683 · GHSA-C5FP-P67M-GQ56 knplabs/knp-snappy Composer Medium Fix reported
PHAR deserialization allowing remote code executionCVE-2023-28115 · GHSA-GQ6W-Q6WH-JGGC knplabs/knp-snappy Composer Critical Fix reported
Snappy PHAR deserialization vulnerabilityCVE-2023-41330 · GHSA-92RV-4J2H-8MJJVersion ranges need review. knplabs/knp-snappy Composer Critical Fix reported