Vulnerability-Lookup

PYSEC-2026-2259

Vulnerability from pysec - Published: 2026-05-13 22:16 - Updated: 2026-07-13 05:50

Details

PlaywrightCapture is a simple replacement for splash using playwright. Prior to 1.39.6, PlaywrightCapture did not sufficiently restrict navigations and resource requests initiated by rendered pages. An attacker-controlled page could abuse browser-side redirection mechanisms, such as window.location.href, to make the capture process open file:// URLs or request resources hosted on private, loopback, link-local, or otherwise non-public IP addresses. In deployments where PlaywrightCapture processes untrusted URLs, this could allow a remote attacker to perform server-side request forgery against internal services or attempt to access local files from the capture environment. Depending on what capture artifacts are generated and exposed, responses from those resources could potentially be leaked through screenshots, saved page content, logs, or other capture outputs. This vulnerability is fixed in 1.39.6.

Severity

7.5 (High)


                  
                    CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Impacted products

Name	purl
playwrightcapture	pkg:pypi/playwrightcapture

Aliases

JSON

To clipboard

{
  "affected": [
    {
      "ecosystem_specific": {},
      "package": {
        "ecosystem": "PyPI",
        "name": "playwrightcapture",
        "purl": "pkg:pypi/playwrightcapture"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.39.6"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "0.1.0",
        "0.1.1",
        "0.1.10",
        "0.1.11",
        "0.1.2",
        "0.1.3",
        "0.1.4",
        "0.1.5",
        "0.1.6",
        "0.1.7",
        "0.1.9",
        "0.2.0",
        "0.2.2",
        "1.12.0",
        "1.12.1",
        "1.13.0",
        "1.13.1",
        "1.13.2",
        "1.13.3",
        "1.13.4",
        "1.14.0",
        "1.14.1",
        "1.14.2",
        "1.14.3",
        "1.14.4",
        "1.15.0",
        "1.15.1",
        "1.15.10",
        "1.15.2",
        "1.15.3",
        "1.15.5",
        "1.15.6",
        "1.15.7",
        "1.15.8",
        "1.15.9",
        "1.16.0",
        "1.16.1",
        "1.16.10",
        "1.16.11",
        "1.16.2",
        "1.16.3",
        "1.16.4",
        "1.16.5",
        "1.16.6",
        "1.16.7",
        "1.16.8",
        "1.16.9",
        "1.17.0",
        "1.17.1",
        "1.17.2",
        "1.17.3",
        "1.17.4",
        "1.17.5",
        "1.17.6",
        "1.18.0",
        "1.19.0",
        "1.19.1",
        "1.19.10",
        "1.19.11",
        "1.19.12",
        "1.19.13",
        "1.19.14",
        "1.19.15",
        "1.19.16",
        "1.19.2",
        "1.19.3",
        "1.19.4",
        "1.19.5",
        "1.19.7",
        "1.19.8",
        "1.19.9",
        "1.20.0",
        "1.20.1",
        "1.20.10",
        "1.20.2",
        "1.20.3",
        "1.20.4",
        "1.20.5",
        "1.20.6",
        "1.20.7",
        "1.20.8",
        "1.20.9",
        "1.21.0",
        "1.21.1",
        "1.21.10",
        "1.21.11",
        "1.21.2",
        "1.21.3",
        "1.21.4",
        "1.21.5",
        "1.21.6",
        "1.21.7",
        "1.21.8",
        "1.21.9",
        "1.22.0",
        "1.22.1",
        "1.22.2",
        "1.22.3",
        "1.22.4",
        "1.22.5",
        "1.22.6",
        "1.22.7",
        "1.22.8",
        "1.23.0",
        "1.23.1",
        "1.23.10",
        "1.23.11",
        "1.23.12",
        "1.23.13",
        "1.23.14",
        "1.23.2",
        "1.23.3",
        "1.23.4",
        "1.23.5",
        "1.23.6",
        "1.23.7",
        "1.23.8",
        "1.23.9",
        "1.24.0",
        "1.24.1",
        "1.24.10",
        "1.24.11",
        "1.24.2",
        "1.24.3",
        "1.24.4",
        "1.24.5",
        "1.24.6",
        "1.24.7",
        "1.24.8",
        "1.24.9",
        "1.25.0",
        "1.25.1",
        "1.25.10",
        "1.25.11",
        "1.25.12",
        "1.25.13",
        "1.25.14",
        "1.25.15",
        "1.25.2",
        "1.25.3",
        "1.25.4",
        "1.25.5",
        "1.25.6",
        "1.25.7",
        "1.25.8",
        "1.25.9",
        "1.26.0",
        "1.26.1",
        "1.26.2",
        "1.26.3",
        "1.27.0",
        "1.27.1",
        "1.27.2",
        "1.27.3",
        "1.27.4",
        "1.27.5",
        "1.27.6",
        "1.27.7",
        "1.27.8",
        "1.27.9",
        "1.28.0",
        "1.28.1",
        "1.28.2",
        "1.28.3",
        "1.28.4",
        "1.28.5",
        "1.28.6",
        "1.29.0",
        "1.29.1",
        "1.29.2",
        "1.29.3",
        "1.30.0",
        "1.31.0",
        "1.31.1",
        "1.31.2",
        "1.31.3",
        "1.31.4",
        "1.31.5",
        "1.31.6",
        "1.31.7",
        "1.32.0",
        "1.32.1",
        "1.32.2",
        "1.32.3",
        "1.32.4",
        "1.32.5",
        "1.33.0",
        "1.34.0",
        "1.34.1",
        "1.34.2",
        "1.34.3",
        "1.34.4",
        "1.34.5",
        "1.35.0",
        "1.35.1",
        "1.36.0",
        "1.36.1",
        "1.36.10",
        "1.36.2",
        "1.36.3",
        "1.36.4",
        "1.36.5",
        "1.36.6",
        "1.36.7",
        "1.36.8",
        "1.36.9",
        "1.37.0",
        "1.37.1",
        "1.37.2",
        "1.37.3",
        "1.38.0",
        "1.39.0",
        "1.39.1",
        "1.39.2",
        "1.39.3",
        "1.39.4",
        "1.39.5"
      ]
    }
  ],
  "aliases": [
    "CVE-2026-44439",
    "GHSA-687h-xw6f-q2qw"
  ],
  "details": "PlaywrightCapture is a simple replacement for splash using playwright. Prior to 1.39.6, PlaywrightCapture did not sufficiently restrict navigations and resource requests initiated by rendered pages. An attacker-controlled page could abuse browser-side redirection mechanisms, such as window.location.href, to make the capture process open file:// URLs or request resources hosted on private, loopback, link-local, or otherwise non-public IP addresses. In deployments where PlaywrightCapture processes untrusted URLs, this could allow a remote attacker to perform server-side request forgery against internal services or attempt to access local files from the capture environment. Depending on what capture artifacts are generated and exposed, responses from those resources could potentially be leaked through screenshots, saved page content, logs, or other capture outputs. This vulnerability is fixed in 1.39.6.",
  "id": "PYSEC-2026-2259",
  "modified": "2026-07-13T05:50:47.368945Z",
  "published": "2026-05-13T22:16:44.850Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://github.com/Lookyloo/PlaywrightCapture/security/advisories/GHSA-687h-xw6f-q2qw"
    },
    {
      "type": "FIX",
      "url": "https://github.com/Lookyloo/PlaywrightCapture/commit/49e289eba756e4fbac1322c33cfd111411562405"
    }
  ],
  "severity": [
    {
      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
      "type": "CVSS_V3"
    }
  ]
}

CVE-2026-44439 (GCVE-0-2026-44439)

Vulnerability from cvelistv5 – Published: 2026-05-13 21:29 – Updated: 2026-05-15 18:01

Title

LookyLoo - PlaywrightCapture permits access to local files and internal network resources during page capture

Summary

Severity

6.6 (Medium)


                        
                          CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:U

SSVC

Exploitation: none Automatable: yes Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-05-15 18:00 UTC

CWE

CWE-918 - Server-Side Request Forgery (SSRF)

Assigner

GitHub_M

References

2 references

URL	Tags
https://github.com/Lookyloo/PlaywrightCapture/sec…	x_refsource_CONFIRM
https://github.com/Lookyloo/PlaywrightCapture/com…	x_refsource_MISC

Impacted products

1 product

Vendor	Product	Version
Lookyloo	PlaywrightCapture	Affected: < 1.39.6

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-44439",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-05-15T18:00:34.453087Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-05-15T18:01:11.899Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "PlaywrightCapture",
          "vendor": "Lookyloo",
          "versions": [
            {
              "status": "affected",
              "version": "\u003c 1.39.6"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "PlaywrightCapture is a simple replacement for splash using playwright. Prior to 1.39.6, PlaywrightCapture did not sufficiently restrict navigations and resource requests initiated by rendered pages. An attacker-controlled page could abuse browser-side redirection mechanisms, such as window.location.href, to make the capture process open file:// URLs or request resources hosted on private, loopback, link-local, or otherwise non-public IP addresses. In deployments where PlaywrightCapture processes untrusted URLs, this could allow a remote attacker to perform server-side request forgery against internal services or attempt to access local files from the capture environment. Depending on what capture artifacts are generated and exposed, responses from those resources could potentially be leaked through screenshots, saved page content, logs, or other capture outputs. This vulnerability is fixed in 1.39.6."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "baseScore": 6.6,
            "baseSeverity": "MEDIUM",
            "privilegesRequired": "NONE",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:U",
            "version": "4.0",
            "vulnAvailabilityImpact": "NONE",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "NONE"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-918",
              "description": "CWE-918: Server-Side Request Forgery (SSRF)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-13T21:29:24.581Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/Lookyloo/PlaywrightCapture/security/advisories/GHSA-687h-xw6f-q2qw",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/Lookyloo/PlaywrightCapture/security/advisories/GHSA-687h-xw6f-q2qw"
        },
        {
          "name": "https://github.com/Lookyloo/PlaywrightCapture/commit/49e289eba756e4fbac1322c33cfd111411562405",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/Lookyloo/PlaywrightCapture/commit/49e289eba756e4fbac1322c33cfd111411562405"
        }
      ],
      "source": {
        "advisory": "GHSA-687h-xw6f-q2qw",
        "discovery": "UNKNOWN"
      },
      "title": "LookyLoo - PlaywrightCapture permits access to local files and internal network resources during page capture"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-44439",
    "datePublished": "2026-05-13T21:29:24.581Z",
    "dateReserved": "2026-05-06T14:40:00.954Z",
    "dateUpdated": "2026-05-15T18:01:11.899Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

GHSA-687H-XW6F-Q2QW

Vulnerability from github – Published: 2026-05-06 23:43 – Updated: 2026-06-09 01:59

Summary

Playwright Capture permits access to local files and internal network resources during page capture

Details

Playwright Capture did not sufficiently restrict navigations and resource requests initiated by rendered pages. An attacker-controlled page could abuse browser-side redirection mechanisms, such as window.location.href, to make the capture process open file:// URLs or request resources hosted on private, loopback, link-local, or otherwise non-public IP addresses. In deployments where PlaywrightCapture processes untrusted URLs, this could allow a remote attacker to perform server-side request forgery against internal services or attempt to access local files from the capture environment. Depending on what capture artifacts are generated and exposed, responses from those resources could potentially be leaked through screenshots, saved page content, logs, or other capture outputs. The patch mitigates the issue by introducing request routing checks that block secondary requests to local files, non-global IP addresses, and .local domains when only_global_lookup is enabled, while still allowing the originally requested capture URL.

Severity

7.5 (High)


                  
                    CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

6.6 (Medium)


                  
                    CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:U

Show details on source website

JSON

To clipboard

{
  "affected": [
    {
      "package": {
        "ecosystem": "PyPI",
        "name": "PlaywrightCapture"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.39.6"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    }
  ],
  "aliases": [
    "CVE-2026-44439"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-918"
    ],
    "github_reviewed": true,
    "github_reviewed_at": "2026-05-06T23:43:36Z",
    "nvd_published_at": "2026-05-13T22:16:44Z",
    "severity": "MODERATE"
  },
  "details": "Playwright Capture did not sufficiently restrict navigations and resource requests initiated by rendered pages. An attacker-controlled page could abuse browser-side redirection mechanisms, such as window.location.href, to make the capture process open file:// URLs or request resources hosted on private, loopback, link-local, or otherwise non-public IP addresses. In deployments where PlaywrightCapture processes untrusted URLs, this could allow a remote attacker to perform server-side request forgery against internal services or attempt to access local files from the capture environment. Depending on what capture artifacts are generated and exposed, responses from those resources could potentially be leaked through screenshots, saved page content, logs, or other capture outputs. The patch mitigates the issue by introducing request routing checks that block secondary requests to local files, non-global IP addresses, and .local domains when only_global_lookup is enabled, while still allowing the originally requested capture URL.",
  "id": "GHSA-687h-xw6f-q2qw",
  "modified": "2026-06-09T01:59:13Z",
  "published": "2026-05-06T23:43:36Z",
  "references": [
    {
      "type": "WEB",
      "url": "https://github.com/Lookyloo/PlaywrightCapture/security/advisories/GHSA-687h-xw6f-q2qw"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44439"
    },
    {
      "type": "WEB",
      "url": "https://github.com/Lookyloo/PlaywrightCapture/commit/49e289eba756e4fbac1322c33cfd111411562405"
    },
    {
      "type": "PACKAGE",
      "url": "https://github.com/Lookyloo/PlaywrightCapture"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
      "type": "CVSS_V3"
    },
    {
      "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:U",
      "type": "CVSS_V4"
    }
  ],
  "summary": "Playwright Capture permits access to local files and internal network resources during page capture"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.

Action not permitted

PYSEC-2026-2259

CVE-2026-44439 (GCVE-0-2026-44439)

GHSA-687H-XW6F-Q2QW

Tags

Sightings

Nomenclature